Attie Grande on Nostr: It seems the JST website (they make connectors) might be somewhat vulnerable to SQL ...
It seems the JST website (they make connectors) might be somewhat vulnerable to SQL injection...
How did I find this out? ... I typed in a full MPN into the search box, with brackets in it.
BM08B-SURS-TF(LF)(SN)
Published at
2026-04-09 16:37:17 UTCEvent JSON
{
"id": "de59e41da4faef63c1a17df2e8e87a89655a2d507a92aff035d41cf0bcffda21",
"pubkey": "f6942baf60c8bcc7660693f6a7c1a1c586350ebe10387b5fe120a6b0fac2c293",
"created_at": 1775752637,
"kind": 1,
"tags": [
[
"proxy",
"https://hachyderm.io/ap/users/115850467516342243/statuses/116375724858548058",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "It seems the JST website (they make connectors) might be somewhat vulnerable to SQL injection...\n\nHow did I find this out? ... I typed in a full MPN into the search box, with brackets in it.\n\nBM08B-SURS-TF(LF)(SN)",
"sig": "c232e8165385f784c88368b8ef6ddd1c511a4fa5890d6655457fff6829602d117968f11505087c7a8335fb1dc0a3c0734f741d2c530fa665d9180bf942a48417"
}
