RE: Yahoo hacked; 500 million usernames, passwords exposed 09-23-2016, 02:51 PM
#9
(09-23-2016, 02:08 PM)Axi Wrote: Back in 2014 there was gaping SQLi in Yahoo!
One of the most common vulnerabilities (SQLi), and Yahoo fell victim.
I'm appalled as to the number of SQL-based web applications that are not sanitized, hence open to all sorts of attack vectors. In-Band (Error-based & Union-based) are everywhere.














![[+]](https://sinister.li/images/modern/collapse_collapsed.png)