---
id: 3760
title: "Is Assessing Your SaaS Providers Worth It? Uncovering an OS Command Injection in a Popular SaaS Platform"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/the-importance-of-assessing-your-saas-providers/"
published_at: "2024-04-30T06:07:49Z"
tags: ["web-security", "vulnerability", "penetration-testing", "education", "saas", "os-command-injection"]
phying_url: "https://phying.com/item/3760"
lang: en
---

# Is Assessing Your SaaS Providers Worth It? Uncovering an OS Command Injection in a Popular SaaS Platform

## Summary

A black-box test of a niche SaaS platform used in Australian schools found OS command injection in the login page's username field, confirmed via a 30-second ping delay — underscoring vendor risk.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2024-04-30T06:07:49Z
- **Original:** https://projectblack.io/blog/the-importance-of-assessing-your-saas-providers/
- **Phying News:** https://phying.com/item/3760