Page 1 of 1
politic xss cause sql error
Posted: Tue Nov 21, 2017 5:02 pm
by fakessh
hey members and admin
poc xss causes sql error
what exactly is your policy
Re: politic xss cause sql error
Posted: Tue Nov 21, 2017 5:14 pm
by x1admin
fakessh wrote: ↑Tue Nov 21, 2017 5:02 pm
hey members and admin
poc xss causes sql error
what exactly is your policy
we don't accept sql injections
Re: politic xss cause sql error
Posted: Tue Nov 21, 2017 5:24 pm
by fakessh
this is absolutely no sql injection
it's sql errors that come from xss
Re: politic xss cause sql error
Posted: Tue Nov 21, 2017 5:27 pm
by fakessh
you have a policy blur some days
the xss that causes sql errors are automatically denied
some days it goes
Re: politic xss cause sql error
Posted: Tue Nov 21, 2017 7:50 pm
by secuninja
i've created hundreds of reports where the xss also triggered an sql error. all approved as long as the correct popup is shown
Re: politic xss cause sql error
Posted: Tue Nov 21, 2017 8:15 pm
by fakessh
viewtopic.php?f=10&t=596
me not
all the examples quoted in this thread are not sql injections just sql errors that come from the xss