Back to directory
WRITEUP #2809

CVE-2021-4119: [Bookstack] Email harvesting via SQL "LIKE" clause exploitation

SQL InjectionBroken Access Control
by@Haxatron1(Haxatron)
Program
Bookstack
Published
Apr 5, 2022
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://haxatron.gitbook.io/vulnerability-research/vr1
▸ RELATED WRITEUPS
Directory Traversal, SQL Injection and Server-Side Request Forgery
SQL InjectionPath traversal
Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670
SQL InjectionReverse engineering
Bypassing airport security via SQL injection
SQL Injection
World of SELECT-only PostgreSQL Injections: (Ab)using the filesystem
SQL Injection
Vestaboard: Exploring Broken Access Controls and Privilege Escalation
Privilege EscalationBroken Access Control

Built with ❤️ by Shubham Rawat