Etiqueta: Practitioner

Blind SQL injection with out-of-band data exfiltration

Blind SQL injection with out-of-band interaction

Blind SQL injection with time delays and information retrieval

Blind SQL injection with time delays

Username enumeration via subtly different responses

Authentication bypass via encryption oracle

Authentication bypass via flawed state machine

Insufficient workflow validation

Weak isolation on dual-use endpoint

Inconsistent handling of exceptional input