3 ms·
> was able to hack the low security password of a SuperAdmin, and gained access to an unsecured script, which was available only for SuperAdmins. This script al
by mustardo 5y ago
> was able to hack the low security password of a SuperAdmin, and gained access to an unsecured script, which was available only for SuperAdmins. This script allowed him to perform SQL injections and extract the data.
Depending on the injection vulnerability data can be exfiltrated, there are tools like sqlmap https://sqlmap.org/ https://sqlmap.org/ which make it pretty easy to dump tables via injection