Cybersecurity, Careers, Hacking, Penetration Testing, Bug Bounty.
Solution Capture the request of the homepage and send it to the repeater. we know that there is a tracking cookie where the vulnerability lies. Add the below query at the end of TrackingId value in encoded format. ‘;SELECT CASE WHEN(username='administrator' AND LENGTH(password)>10) THEN pg_sleep(0)