CO2
Summary: PortSwigger's BApp Store lists Co2, a Burp Suite extension by Jason Gillam at version 1.2.0, last updated 11 March 2024, containing modules that extend Burp's capabilities with their own configuration sub-tabs. The listing warns that the SQLMapper component has had command injection flaws in the past and advises taking care when scanning untrusted sites.
Bottom line: A security tool that itself carried command injection flaws in its SQLMapper module is a reminder that the extensions plugged into your testing stack are third-party code PortSwigger explicitly makes no warranty about.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026