pentester.land· Oct 19, 2021· by Marc Olivier Bergeron

A Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection

Open Original Article ↗
Target Program: AWS
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#SQL injection#WAF bypass