{"id":352,"date":"2026-03-10T01:45:12","date_gmt":"2026-03-10T01:45:12","guid":{"rendered":"http:\/\/quantusintel.group\/osint\/blog\/2026\/03\/10\/bug-bounty-bootcamp-27-sql-injection-on-insert-turning-comment-forms-into-data-exfiltration\/"},"modified":"2026-03-10T01:45:12","modified_gmt":"2026-03-10T01:45:12","slug":"bug-bounty-bootcamp-27-sql-injection-on-insert-turning-comment-forms-into-data-exfiltration","status":"publish","type":"post","link":"https:\/\/quantusintel.group\/osint\/blog\/2026\/03\/10\/bug-bounty-bootcamp-27-sql-injection-on-insert-turning-comment-forms-into-data-exfiltration\/","title":{"rendered":"Bug Bounty Bootcamp #27: SQL Injection on INSERT \u2014 Turning Comment Forms into Data Exfiltration\u2026"},"content":{"rendered":"<div class=\"medium-feed-item\">\n<p class=\"medium-feed-image\"><a href=\"https:\/\/osintteam.blog\/bug-bounty-bootcamp-27-sql-injection-on-insert-turning-comment-forms-into-data-exfiltration-d49968b1f7ca\"><img data-opt-id=88761164  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/cdn-images-1.medium.com\/max\/784\/1*Te_joOEg30wsadnXRJLEig.jpeg\" width=\"784\" \/><\/a><\/p>\n<p class=\"medium-feed-snippet\">SELECT queries aren\u2019t the only way to steal data. When INSERT statements are vulnerable, every comment box, registration form, and support\u2026<\/p>\n<p class=\"medium-feed-link\"><a href=\"https:\/\/osintteam.blog\/bug-bounty-bootcamp-27-sql-injection-on-insert-turning-comment-forms-into-data-exfiltration-d49968b1f7ca\">Continue reading on OSINT Team \u00bb<\/a><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>SELECT queries aren\u2019t the only way to steal data. When INSERT statements are vulnerable, every comment box, registration form, and support\u2026 Continue reading on OSINT Team \u00bb<\/p>\n","protected":false},"author":1,"featured_media":353,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-352","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/posts\/352","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/comments?post=352"}],"version-history":[{"count":0,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/posts\/352\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/media\/353"}],"wp:attachment":[{"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/media?parent=352"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/categories?post=352"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quantusintel.group\/osint\/wp-json\/wp\/v2\/tags?post=352"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}