A classic decode-after-check vulnerability to blacklist based WAF bypass, leading to a blind SQLi.
mediumSQL InjectionWeb
// field notes
CVE analysis, original research, tutorials, engineering notes, and practical security work.
A classic decode-after-check vulnerability to blacklist based WAF bypass, leading to a blind SQLi.