Oğuzhan Karasu

An authorization bypass exists due to a user-controlled key, which allows for privilege escalation.

Improper neutralization of special elements used in an SQL command allows for SQL injection. This occurs when the application fails to properly sanitize user-supplied input, allowing an attacker to interfere with the queries that an application makes to its database.

Improper neutralization of special elements used in an SQL command leads to a SQL injection flaw. This issue allows for Command Line Execution, which is the ability to run arbitrary operating system commands on the server via the database engine.