Easy
SQL Injection
PawMatch breed search UNION injection
A pet-adoption directory. The breed filter concatenates straight into the query.
PentestingHere Academy
Official Academy lab
- Attempts
- 1
- Solves
- 1
- Published
- 25 Aug 2026
Scenario
PawMatch lists adoptable pets by shelter. The search box filters by breed via /search.php?breed=.
Goal
The pets search only ever shows the pets table. Read from the staff_notes table instead. One of its notes contains the flag.