🎯 New Report #3778282: Critical SQL Injection WDM API (████████)
🔺Severity: Critical
👽 Reporter: matty69v
⭐️ Reputation: 1039
🛠 State: resolved
💼 Team: Essity
💵 Bounty: null
🕐 Submitted: 2026-06-02
⏰ Disclosed: 2026-08-27 07:23:47
📝 Summary: A boolean-based and time-based blind SQL injection vulnerability was discovered in the searchText query parameter of the GET /api/WDMProduct endpoint. The vulnerability allowed an unauthenticated attacker to read or modify data in the backing Microsoft SQL Server database. The backend was found to be hosted on an Azure App Service and served by the in-scope Angular front-end application.
📂 Report JSON File: 3778282
@hackeronereports