SQL Injection found on ibm.com subdomain(hackerone.com)
4 points by razorsa | 0 comments
A HackerOne vulnerability report about a SQL injection on an ibm.com subdomain; the page shows a HackerOne sign-in prompt.
#sql-injection on Hacker News
3 stories tagged sql-injection, newest first.
Bypassing airport security via SQL injection(ian.sh)
1859 points by iancarroll | 403 comments
Ian Carroll's blog post describing how a SQL injection flaw let researchers add arbitrary people to the TSA Known Crewmember program, bypassing airport security screening.
Password may not contain: select, insert, update, delete, drop(id.uni-lj.si)
333 points by jesprenj | 215 comments
University of Ljubljana IDportal password reset page, noted for password rules banning SQL keywords like select, insert, update, delete, drop.