sql-injection 2 Exploit Arbitrary Deserialization through Blind SQL Injection Dec 21, 2022 Bypassing addslashes() using format string to get SQL Injection Sep 28, 2021