---
id: 957
title: "Spooky Bug!"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/spooky-bug/"
published_at: "2020-10-27T00:00:00Z"
tags: ["bug-bounty", "sql-injection", "bugcrowd", "triage", "severity", "pii", "blind-sqli"]
phying_url: "https://phying.com/item/957"
lang: en
---

# Spooky Bug!

## Summary

Bugcrowd's Luke Stephens (hakluke) tells a Halloween-themed war story: triaging a blind SQL injection that exposed customers' personally identifiable information and escalating it as a P1.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2020-10-27T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/spooky-bug/
- **Phying News:** https://phying.com/item/957