1 day
•
Videos
• 3 min read
https://youtu.be/GknBmsqaFk4
The bug
Here's a login endpoint from a small Express demo app
scan-target-demo-apps/apps/01-sql-injectionhttps://github.com/sendwavehub/scan-target-demo-apps:
app.post'/login', req, res => {
const { username = '', pa...