---
id: 5210
title: "The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions."
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-geolocation-sqli"
published_at: "2025-07-31T12:00:00Z"
tags: ["bug-bounty", "cloud", "rce", "vulnerability-research", "sql-injection", "web-security", "cookies", "geolocation-restrictions"]
phying_url: "https://phying.com/item/5210"
lang: en
---

# The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.

## Summary

Narrates XBOW's dogged SQL injection hunt after geolocation blocks: header and user-agent spoofing failed, but a cookie pivot into a /non_participating/ endpoint broke through.

## Intelligence Metadata

- **Sources:** xbow.com
- **Published:** 2025-07-31T12:00:00Z
- **Original:** https://xbow.com/blog/xbow-geolocation-sqli
- **Phying News:** https://phying.com/item/5210