Data Extraction via String Concatenation in a Blind SQL Injection Vulnerability

A few weeks ago while performing a web application test for $CLIENT, I happened to run into search functionality. As one of the very first standard tests I inserted a single quote ‘ into the search field and clicked the search button. The SQL error mes… Continue reading Data Extraction via String Concatenation in a Blind SQL Injection Vulnerability

Posted in Uncategorized