SQL injection, time zoom script, tile ID

Disclosed: 2014-07-18 20:25:51 By bitquark To uzbey
Unknown
Vulnerability Details
The tile ID parameter to the tile zoom script is vulnerable to SQL injection. The following will cause the script to run a benchmark, returning an error 8-10 seconds later: https://staging.uzbey.com/zoom-image/BENCHMARK(10000000,SHA1(1))
Actions
View on HackerOne
Report Stats
  • Report ID: 17227
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report