From SQL Injection to Remote Code Execution: Following an Unexpected Attack Chain

[ Disclaimer ]This is a writeup of a vulnerability I discovered, responsibly disclosed, and confirmed as patched before publishing. The target’s domain, IP address, hostnames, file paths, credentials, and any secrets discovered during the assessment have been redacted or replaced with placeholders. Payloads and command output are shown as they...