193436.txt

ReportLink:https://hackerone.com/reports/193436
WeaknessName:SQL Injection
Reporter:https://hackerone.com/korprit
ReportedTo:U.S. Dept Of Defense(deptofdefense)
BountyAmount:
Severity:medium
State:Closed
DateOfDisclosure:27.04.2017 20:05:52

Summary:
A Department of Defense website was vulnerable to a SQL injection attack which may allow an attacker to execute arbitrary SQL commands and expose sensitive data. @korprit was able to demonstrate this vulnerability by crafting a specially formatted URL.