Security Lab & CTF

~/research/tags/#SQL Injection

> #SQL Injection

4 RESEARCH ENTRIES

> SunshineCTF 2026

Planetary Probe

Blind PostgreSQL SQL injection reaches command execution through COPY TO PROGRAM.

Read Writeup CTF_ENTRY

#CTF #Web #SQL Injection #RCE #PostgreSQL #SunshineCTF

> PTITCTF Finals 2026

MEGALOVANIA

PostgreSQL SQL injection bypasses a keyword filter and reads the flag with pg_read_file.

Read Writeup CTF_ENTRY

#CTF #Web #SQL Injection #PostgreSQL #PTITCTF

> PTITCTF Quals 2026

LEMON MELON COOKIE

Client-side privilege escalation and SQL injection lead to the administrator account and flag.

Read Writeup CTF_ENTRY

#CTF #Web #SQL Injection #Privilege Escalation #PTITCTF

CVE-2026-61948 - Unauthenticated SQL Injection in Mini Cart Coupon REST Endpoint

CVE-2026-61948

Unauthenticated SQL Injection in Mini Cart Coupon REST Endpoint

Unauthenticated SQL injection in WPDM Premium Packages <= 6.2.0 exposes the public Mini Cart coupon REST endpoint to blind time-based database extraction.

Read Advisory SECREPORT

#CVE #WordPress #SQL Injection