politic xss cause sql error

fakessh · Post by **fakessh** » Tue Nov 21, 2017 5:02 pm

hey members and admin

poc xss causes sql error
what exactly is your policy

Post by **x1admin** » Tue Nov 21, 2017 5:14 pm

fakessh wrote: ↑
Tue Nov 21, 2017 5:02 pm
hey members and admin

poc xss causes sql error
what exactly is your policy

we don't accept sql injections

fakessh · Post by **fakessh** » Tue Nov 21, 2017 5:24 pm

this is absolutely no sql injection
it's sql errors that come from xss

fakessh · Post by **fakessh** » Tue Nov 21, 2017 5:27 pm

you have a policy blur some days
the xss that causes sql errors are automatically denied
some days it goes

secuninja · Post by **secuninja** » Tue Nov 21, 2017 7:50 pm

i've created hundreds of reports where the xss also triggered an sql error. all approved as long as the correct popup is shown

fakessh · Post by **fakessh** » Tue Nov 21, 2017 8:15 pm

viewtopic.php?f=10&t=596

me not

all the examples quoted in this thread are not sql injections just sql errors that come from the xss

Open Bug Bounty Community Forum