L
PTITCTF Quals 2026
LEMON MELON COOKIE
Client-side privilege escalation and SQL injection lead to the administrator account and flag.
Read
Client-side privilege escalation and SQL injection lead to the administrator account and flag.
Unauthenticated SQL injection in WPDM Premium Packages <= 6.2.0 exposes the public Mini Cart coupon REST endpoint to blind time-based database extraction.