Skeletor is here to help

https://lemmy.world/post/38263914

Skeletor is here to help - Lemmy.World

Lemmy

Interesting… I wrote a gag comment about using an SQL injection as my password and crashed the Lemmy API. Using connect if that makes any difference.
Like the Bobby tables? Can u put it in a coffee?
noice! Did the ‘; DROP TABLE USERS;’ respond?
Almost line for line. A wall of XML popped up when I hit submit. Looks like yours went through.
Can you make a pastebin of the text? I’m curious.
Trying. Can’t seem to replicate the string. Maybe if it happens again.
SELECT * FROM Users WHERE UserId = 105 OR 1=1;
SQL injection in the big 2025…
Friend, we’re still seeing publicly exposed plaintext credentials in 2025…
I haven’t kept up with the cybersecurity world recently. Ever since I graduated I’ve just been completely fed up with IT. Is there a story behind this? Has a major service done this lately?
I ran into it within the last month. I’m a pentester.