CVE-2020-24932: A Sorting Parameter, a Missing Check, and a Critical SQLi
pr0h0•
A deep technical walkthrough of CVE-2020-24932 showing how a seemingly harmless sorting parameter and a missing authorization check combined to create a critical SQL injection vulnerability.
cve-2020-24932sql-injectionvulnerability-analysis