Back to directory

WRITEUP #1941

Varonis Threat Labs Discovers SQLi and Access Flaws in Zendesk

SQL InjectionLogic flaw

byTal Peleg

Program

Zendesk

Published

Nov 15, 2022

Added to HackDex

Nov 17, 2022

Read Full Writeuphttps://www.varonis.com/blog/zendesk-sql-injection-and-access-flaws

▸ RELATED WRITEUPS

Logic Flaw: I Can Block You from Accessing Your Own Account

Logic BugLogic flaw

Directory Traversal, SQL Injection and Server-Side Request Forgery

SQL InjectionPath traversal

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670

SQL InjectionReverse engineering

Bypassing airport security via SQL injection

“Like” Bypass on Customer Reviews — €500 bounty

Logic BugLogic flaw

Built with ❤️ by Shubham Rawat