search

Headline / Gangs

Gangs for Jailbreak Servers Running SourceMod
GNU General Public License v3.0
17 stars 7 forks source link

SQL Injection #49

Closed MSWS closed 6 days ago

MSWS commented 3 years ago

It is possible for players to SQL Inject by changing their gang name. The name is not properly escaped in the code, so for example " or "" would break a large portion of the database.

Headline commented 3 years ago

Thanks! A pretty serious reason to avoid using this plugin entirely until a fork is properly maintained