writeups.xyz / Pwning the portal: from database dump to session hijacking

Submitter : c2a

Date: 12 January 2022

Bounty : undisclosed

Vulnerabilities :

• SQL Injection
• XSS
• CSRF

Programs :

• Undisclosed

Authors :

• Bitcrack (@Bitcrack_cyber)

Link :
https://www.bitcrack.net/pwning-the-portal-from-database-dump-to-session-hijacking/