Responsible Disclosure
Bypassing a WAF to Exploit a Blind SQLi (CVE-2024-XXXX)
By Chidi Eze · 15 August 2026
Responsible disclosure walkthrough of a blind time-based SQL injection in a popular Nigerian fintech API, including the WAF bypass chain and vendor timeline.
Introduction
During a recent engagement, I discovered...