writeups.xyz / Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670

Submitter : c2a

Date: 30 August 2024

Bounty : undisclosed

Vulnerabilities :

• SQL Injection
• Reverse Engineering
• Security Code Review

Programs :

• Progress (WhatsUp Gold)

Authors :

• Sina Kheirkhah (@SinSinology)

Link :
https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/