Page 1 of 1

politic xss cause sql error

Posted: Tue Nov 21, 2017 5:02 pm
by fakessh
hey members and admin

poc xss causes sql error
what exactly is your policy

Re: politic xss cause sql error

Posted: Tue Nov 21, 2017 5:14 pm
by x1admin
fakessh wrote:
Tue Nov 21, 2017 5:02 pm
hey members and admin

poc xss causes sql error
what exactly is your policy
we don't accept sql injections

Re: politic xss cause sql error

Posted: Tue Nov 21, 2017 5:24 pm
by fakessh
this is absolutely no sql injection
it's sql errors that come from xss

Re: politic xss cause sql error

Posted: Tue Nov 21, 2017 5:27 pm
by fakessh
you have a policy blur some days
the xss that causes sql errors are automatically denied
some days it goes

Re: politic xss cause sql error

Posted: Tue Nov 21, 2017 7:50 pm
by secuninja
i've created hundreds of reports where the xss also triggered an sql error. all approved as long as the correct popup is shown 8-)

Re: politic xss cause sql error

Posted: Tue Nov 21, 2017 8:15 pm
by fakessh
viewtopic.php?f=10&t=596

me not

all the examples quoted in this thread are not sql injections just sql errors that come from the xss