Gardens by the Bay Enos-Iot

https://gbsmartgarden.enos-iot.com/login?redirect=%2Fws…

Case summary

The target, observed result, and important findings.

Status
Current evaluation: Limited evidence: critical response missing, function fingerprint limit, identifier limit
Findings: 3Low
Submitted URL: https://gbsmartgarden.enos-iot.com/ws/msw/tenant/'+UNION+SELECT+(SELECT+ID+FROM+SGMSDB.DOMAINS),+'',+'',+'',+'',+'',+(SELECT+MD5(999999999)),'',+'',+' Search for this value.
Final URL: https://gbsmartgarden.enos-iot.com/login?redirect=%2Fws%2Fmsw%2Ftenant%2F%27%2BUNION%2BSELECT%2B%28SELECT%2BID%2BFROM%2BSGMSDB.DOMAINS%29%2C%2B%27%27%2C%2B%27%27%2C%2B%27%27%2C%2B%27%27%2C%2B%27%27%2C%2B%28SELECT%2BMD5%28999999999%29%29%2C%27%27%2C%2B%27%27%2C%2B%27 Search for this value.
Domain registration: enos-iot.comMore than 90 days oldRegistered 2022-09-05 · Registrar Xin Net Technology Corporation
Language: Detecting...
Network: 25 requests across 2 hosts
Infrastructure: Loading...
Behavior: 1 recorded events
Interaction: 3 actions · 1 submission · stopped: repeated state
1. fillsucceededtext | | Username | Enter your username or email
2. fillsucceededpassword | | Password | Enter your password
3. submitsucceededLogin

How and when the analysis ran.

Detected findings grouped by risk

Network requests grouped by resource type

Recorded actions grouped by type

Requests to the most active hosts

First-party and third-party requests

Network responses grouped by MIME type