Client-side SQL injection (stored DOM-based)
Summary: PortSwigger Research describes client-side SQL injection as a stored DOM-based vulnerability where a script incorporates controllable data into a client-side SQL query in an unsafe way, letting an attacker construct a URL that executes an arbitrary SQL query in the local SQL database of another user's browser. The impact depends on what that database holds: if it stores sensitive data such as messages in a social networking application the attacker may retrieve it, and if it stores pending user actions such as outgoing messages in an email application the attacker may modify them and act on the user's behalf.
What you should know: The payload lives in the victim's browser database, not your server, so an attacker who gets a user to visit a crafted URL can read stored messages or alter queued outgoing email under that user's identity. PortSwigger notes Burp's static analysis can flag false positives, so a finding without dynamic evidence needs code and execution-path review before you treat it as exploitable.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026