Client-side SQL injection (reflected DOM-based)
Summary: PortSwigger describes reflected DOM-based client-side SQL injection, where data copied from a request is echoed into the immediate response in a part of the DOM that a client-side script then processes unsafely, letting an attacker control a JavaScript string or similar value. The attacker can construct a URL that, when visited by another user, executes an arbitrary SQL query in that user's local browser database, and PortSwigger notes Burp Scanner flags this through dynamic and static analysis, with static analysis alone prone to false positives.
Why it matters: The impact hinges on what the browser's local SQL database holds: if it stores sensitive data such as messages in a social networking application, the attacker may retrieve it, and if it stores pending user actions such as outgoing email, the attacker may modify that data and act on the user's behalf.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026