πŸ”„ WEB-03: Second-Order SQLi

μ €μž₯된 값이 λ‚˜μ€‘μ— μΏΌλ¦¬μ—μ„œ μ‹€ν–‰λ˜λŠ” 취약점

πŸ“ Step 1: λŒ“κΈ€ μ €μž₯

πŸ’‘ Payload μ˜ˆμ‹œ (μ €μž₯ μ‹œμ μ—λŠ” 검증됨):
admin' UNION SELECT 1,username,password FROM users WHERE '1'='1

πŸ” Step 2: λŒ“κΈ€ 검색 (Second-Order μ‹€ν–‰)

πŸ’‘ μ €μž₯된 νŽ˜μ΄λ‘œλ“œλ‘œ κ²€μƒ‰ν•˜λ©΄ 쿼리 문법이 싀행됨

πŸ“‹ 전체 λŒ“κΈ€ λͺ©λ‘

아직 λŒ“κΈ€μ΄ μ—†μŠ΅λ‹ˆλ‹€.