Re:How I bypassed Cloudflare's SQL Injection filter
by viraptor on Friday September 18, 2020 @04:43PM
(#24521697)
I'm terms of injection you're 100% there. Parameterised queries are safe (unless there's a bug in the database itself).
It doesn't mean you're safe in other contexts though. For example if you allow reading another user's data without checking permissions, you've got an IDOR vulnerability. https://portswigger.net/web-security/access-control/idor
It doesn't mean you're safe in other contexts though. For example if you allow reading another user's data without checking permissions, you've got an IDOR vulnerability. https://portswigger.net/web-security/access-control/idor