writeups.xyz / Why ORMs and Prepared Statements Can't (Always) Win

Submitter : c2a

Date: 26 June 2023

Bounty : undisclosed

Vulnerabilities :

• SQL Injection
• RCE
• Security Code Review

Programs :

• Soko
• Gentoo Linux

Authors :

• Thomas Chauchefoin (@Swapgs)

Link :
https://www.sonarsource.com/blog/why-orms-and-prepared-statements-cant-always-win/