There is a SQL inject vulnerability
Open
- Dominant language
- JavaScript
- Stars
- 1.4k
- Forks
- 306
- PR merge metrics
- No merged PRs in 30d
Description
Just try
```
1=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)))
```
in where input fields.
so i can get the user of mysql database.
Contributor guide
Assessment
This issue has not been assessed yet.