The provided text describes an SQL injection vulnerability in BlackNova Traders, where the 'startdate' parameter in the 'news.php' file is not properly sanitized. The example URL demonstrates how an attacker could inject SQL code to exploit the vulnerability.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:BlackNova Traders (version not specified)
No auth needed
Prerequisites:Access to the vulnerable 'news.php' endpoint