writeups.xyz / Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

Submitter : c2a

Date: 21 February 2022

Bounty : undisclosed

Vulnerabilities :

• SQL Injection

Programs :

• Oracle (MySQL)

Authors :

• Stypr (@Stereotype32)

Link :
https://flattsecurity.medium.com/finding-an-unseen-sql-injection-by-bypassing-escape-functions-in-mysqljs-mysql-90b27f6542b4