Maxwell Dulin personal blog
Finding an authorization bypass on my own website
The mysqljs parameterized query parser handles objects as column name and key, leading to alterations of the query.
- Points
- 107
- HN comments
- 118
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2022
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Mar 5, 2022 | Finding an authorization bypass on my own website by caaqil | 107 | 118 |
