Open Bug Bounty Community Forum

Please recheck the report number 3632899 and 3632876 for Improper access control. I've added the production steps in the comment box of the report. The vulnerability is easy to reproduce.

Putting below payload in username and password will bypass the authentication for both of the reports.
0' OR '0'='0

haha they reject same, always happening with me too on this.

we don't accept sql injections, read rules

This is frustrating and not nice at all! Always happening with me too on this. Drift Boss