Project Sekai
🔒 BYUCTF 2023 / ✅-web-urmombotnetdotnetcom-3
byuctf.xyz:40010
--------------------
What is flag 3? (see byuctf{fakeflag3} in source)
(see source from first chall)
Files: No files.
Tags: Medium
cur.execute("SELECT user_id, message FROM support_tickets WHERE ticket_id=%s", (ticket_id))
File "/app/ticket_routes.py", line 62, in post_add_message
@app.route('/api/tickets/<int:ticket_id>', methods=['POST'])
@token_required
def post_add_message(session_data, ticket_id):
# get user_id from ticket_id
cur = mysql.connection.cursor()
cur.execute("SELECT user_id, message FROM support_tickets WHERE ticket_id=%s", (ticket_id))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
response = cur.fetchone()
cur.close()MySQLdb.ProgrammingError: (1146, "Table 'ctf.support_tickets' doesn't exist")
byuctf{let's_not_even_talk_about_the_newline_injection...}