Data exfiltration via SQL injection is not possible using this vulnerability." The flaw impacts FileCatalyst Workflow 5.1.6 Build 135 and older versions.

If not SQL injection, the group is also known to exploit handfuls of other known vulnerabilities in Internet-facing servers. It has exploited more than a handful of bugs from 2024, affecting Craft ...

SQL injection, along with other types of database attacks, ranked as one of the top trends in the SANS Institute's Top 20 Vulnerabilities list. (See SANS Exposes 'Safe' Technologies.) ...

SQL injection exploit flaws that execute malicious code through strings that are entered into forms contained on a vulnerable website. The flaws are the result of a failure to filter out commands.