Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/06/09 9:20 p.m.20 views

Pornhub: Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)

Researcher found a blind SQL injection in the profile comment Like functionality, executing on the second request made for a given comment dislikes. Summary The injection was found manually, used discovery methods are basically the same as described in this awesome article by @gerbenjavado:...

8AI score
SaveExploits0
Rows per page
Query Builder