Tag: second-order

All the articles with the tag "second-order".

• Second-Order SQL Injection: When Trusted Data Turns Hostile

  kOaDT

  12 Feb, 2026

  How a crafted display name stored through a product review becomes a SQL injection payload when an admin filters reviews on the moderation panel.