Im working on a website that has the 2 main vulnerabilities, SQL Injection and XSS.
-SQL INJECTION
the sql injection on the site is a bit tricky, there is a PHP database searchbar on the website that searchs through listed products, it can be exploited because it gives out SQL syntax errors, i know there is a way to bypass wordlimits in search engines however i can seem to find any so i need peoples inputs below
-Cross Site Scripting
the XSS vuln. on the website, i havent tested anything so far but there is a contact form which is 100% vulnerable, although if it doesnt work the site admin will recieve a failed attempt at XSS and they might do fix up their site.
TL:DR; just need some help on a website i am working on
-SQL INJECTION
the sql injection on the site is a bit tricky, there is a PHP database searchbar on the website that searchs through listed products, it can be exploited because it gives out SQL syntax errors, i know there is a way to bypass wordlimits in search engines however i can seem to find any so i need peoples inputs below
-Cross Site Scripting
the XSS vuln. on the website, i havent tested anything so far but there is a contact form which is 100% vulnerable, although if it doesnt work the site admin will recieve a failed attempt at XSS and they might do fix up their site.
TL:DR; just need some help on a website i am working on