Stored XSS via SVG Upload Bypass in NovoSGA

How I Found a Time-Based Blind SQL Injection in i-Educar (With Real Delay and PoC).

How I Found a Time-Based Blind SQL Injection in i-Educar (With Real Delay and PoC).

Exploring Boolean-Based SQL Injection in i-Educar with sqlmap and Database Extraction.

How I Discovered Multiple Stored XSS in i-Educar via educar_calendario_anotacao_cad.php (With PoC and Screenshots).

How I Discovered Multiple Stored XSS in i-Educar via educar_modulo_cad.php (With PoC and Screenshots).