Twitter-Clone SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Twitter-Clone version 1.0. This vulnerability allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'name' parameter. Exploitation can be done by sending crafted payloads to the 'search.php' endpoint, potentially leading to the extraction of sensitive database information such as usernames, credentials, and system data. The vulnerability arises from improper neutralization of special elements used in SQL commands, enabling both error-based and union-based SQL injection techniques.

Impact

Exploitation of this vulnerability allows for arbitrary SQL query execution, which could be used to manipulate the database or extract sensitive information such as user credentials and system data.