TechLobstersabout 2 hours ago
SQL injection in Front Gate Tickets
1 min read
An unauthenticated SQL injection in Front Gate Tickets' device API allowed reading the entire fgs database with over 500 tables of customer data, ticketing records, and staff credentials. The researcher used password reset tokens to gain admin access to every festival on the platform, including EDC and Bonnaroo. Front Gate Tickets and Live Nation resolved the issue.
Level
Hype check
Tap to vote and see what everyone thinks.
