SQL injection DISCOVERED_BY Clay
Clay isolated the web application's vulnerability to pages affected by SQL injection.
Explicit Confidence 96% · Clay EP 42 Details
“I was able to isolate it to one of two pages that had this vulnerability.”
Vulnerability
vulnerability:sql_injection
Also: SQL I injection, SQL injection bug, SQL injection vulnerability, SQLi
Web-application vulnerability used to gain a shell on the compromised Linux server.
Web-application vulnerability used to gain a shell on the compromised Linux server.
“Being a web application, I knew it had to be probably SQL injection.”
“they got in by using an SQL injection through the web page”
Injection vulnerability found on a TalkTalk subdomain and shared on a hacking forum.
“he’s effectively found is an SQL injection on a subdomain”
Injection flaw that allowed dumping the site's complete database, including purchase and credit-card data.
“we had found that there was an SQL injection bug that allowed us to dump the complete database”
Input-handling vulnerability in the Sophos firewall web interface that allowed commands to be injected into the configuration database.
“It was a SQL I injection”
“the web UI of this firewall had a SQL injection vulnerability in it”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Clay | Explicit | 42 |
| incoming | INVOLVES | TalkTalk incident | Explicit | 117 |
| incoming | EXPLOITS | Jason Haddix | Explicit | 130 |
| incoming | EXPLOITS | Asnarok | Explicit | 174 |
| incoming | INITIAL_ACCESS_VIA | Asnarok | Derived | 174 |
SQL injection DISCOVERED_BY Clay
Clay isolated the web application's vulnerability to pages affected by SQL injection.
Explicit Confidence 96% · Clay EP 42 Details
“I was able to isolate it to one of two pages that had this vulnerability.”
TalkTalk incident INVOLVES SQL injection
The incident began with an SQL injection vulnerability on a TalkTalk subdomain.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“What he’s effectively found is an SQL injection on a subdomain”
Jason Haddix EXPLOITS SQL injection
Jason found an SQL injection bug that allowed the site's complete database, including purchases and credit-card data, to be dumped.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“we had found that there was an SQL injection bug that allowed us to dump the complete database”
Asnarok EXPLOITS SQL injection
Asnarok exploited a SQL injection vulnerability in the Sophos XG Firewall web interface.
Explicit Confidence 99% · Jack Rhysider EP 174 Details
“the web UI of this firewall had a SQL injection vulnerability in it”
Asnarok INITIAL_ACCESS_VIA SQL injection
The Asnarok incident initially gained access through the SQL injection vulnerability in the firewall's web UI.
Derived Confidence 96% · Jack Rhysider EP 174 Details
“an attacker could enter in some commands there which would glitch out the user input handling mechanism of the firewall and allow the attacker to inject their own commands into the database”