writeups.xyz / Directory Traversal, SQL Injection and Server-Side Request Forgery

Submitter : c2a

Date: 10 September 2024

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• SQL Injection
• SSRF

Programs :

• Sage

Authors :

• Chris McCurley (@Chrisrmccurley)

Link :
https://research.aurainfosec.io/disclosure/sagecrm2/