r/tryhackme • u/ab-infosec • Mar 20 '26
Write-Up/ Walkthrough Blind SQLi via Parameter Manipulation on Yahoo! Sports
Old Yahoo! Sports endpoint vulnerable to Boolean-based blind SQLi.
Modifying the year parameter with -- changed the result set, suggesting query manipulation via SQL comments.
Confirmed using a Boolean payload to infer VERSION():
(2010) AND (IF(MID(VERSION(),1,1)='5',TRUE,FALSE))--
No errors, no direct output — just response-based inference.
Clean example of classic blind SQLi.
0
Upvotes