pentester.land· Nov 15, 2022· by Tal Peleg

Varonis Threat Labs Discovers SQLi and Access Flaws in Zendesk

Target Program: Zendesk

🎯 Vulnerability: SQL Injection (SQLi)

💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.

#SQL injection#Logic flaw