[8220347]

Say I find a sql injection vulnerability in subdomain.test.com. Would this give me access to information of users on test.com (logins), or just subdomain.test.com? Thanks

[xx 0x0 xx]

there are many cases

1-) this subdomain database is the same as test.com // then u can get the same database
2-) subdomain on the same server but not same database // this will require shell/root the server
3-) subdomain on other server with stand alone database // this is no you can't u will just get subdomain.test.com database

[SIM-3192951]

If they have the same IP, there is a chance.

[8220347]

Are the majority of sites configured with the "subdomain database the same as test.com" or are most configured with "subdomain on other server with stand alone database"

[xx 0x0 xx]

Are the majority of sites configured with the "subdomain database the same as test.com" or are most configured with "subdomain on other server with stand alone database"

i think most of web masters configure it as stand alone on other servers

[Disparity]

i think most of web masters configure it as stand alone on other servers

This, but they're often shared servers, so it's possible to get access to other user's sites on the server.

[xx 0x0 xx]

This, but they're often shared servers, so it's possible to get access to other user's sites on the server.

you are totaly right i forget to mention this 🤝

[SynthMesc]

Often websites like to use the same database site wide, so yes. You will have access to the database of test.com

Cheers 🤝

[amnaishaq1]

Yes You Will Have Access to The Database ... Some Time