{"id":32646,"date":"2020-01-07T12:27:23","date_gmt":"2020-01-07T12:27:23","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/"},"modified":"2020-01-07T12:27:23","modified_gmt":"2020-01-07T12:27:23","slug":"im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/","title":{"rendered":"I&#8217;m the queen of Gibraltar and will never get a traffic ticket&#8230; just two of the things <i>anyone<\/i> could have written into country&#8217;s laws thanks to unsanitised SQL input vuln"},"content":{"rendered":"<div readability=\"30.616714697406\">\n<h2>Run sqlmap, edit online statutes, gain immunity for life?<\/h2>\n<p> <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/macaque_monkey_shutterstock.jpg?x=442&amp;y=293&amp;crop=1\" alt=\"A macaque monkey. Pic: Shutterstock\" width=\"442\" height=\"293\" class=\"article_img\"><\/p>\n<p>Monkeying around with SQL could have had comedy consequences for Gibraltar<\/p>\n<\/div>\n<div id=\"body\" readability=\"111.37410071942\">\n<p><strong class=\"trailer\">Exclusive<\/strong> A SQL injection vulnerability on the Government of Gibraltar&#8217;s website paved the way for any old Joe to rewrite official web versions of the British Overseas Territory&#8217;s laws.<\/p>\n<p>Security researcher Ax Sharma spotted the vuln while poring over the Gibraltar government&#8217;s visa rules, which he accessed from the Gibraltar Borders and Coastguard Agency <a target=\"_blank\" href=\"http:\/\/www.gibraltarborder.gi\/law-and-policies\" rel=\"noopener noreferrer\">website<\/a>.<\/p>\n<p>A malicious person using the information exposed by the government website could have deleted and uploaded PDF files to the official online repository of Gibraltar&#8217;s laws.<\/p>\n<div class=\"CaptionedImage Center\" readability=\"8\"><a href=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/gib_gov_editable_laws.jpg\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/gib_gov_editable_laws.jpg?x=648&amp;y=413&amp;infer_y=1\" alt=\"Gibraltar gov editable laws\" title=\"Gibraltar gov editable laws\" height=\"413\" width=\"648\"><\/a><\/p>\n<p class=\"text_center\">See the &#8220;modify&#8221; and &#8220;delete&#8221; links at the bottom of the page? All you needed to make those work were the site login details &#8211; and protections around those were trivial to bypass<\/p>\n<\/div>\n<p>Such people, using a freely downloadable software suite, could have abused the vulnerability to alter online versions of laws. In the digital era, laws published on government websites are treated by the wider world as official and binding even though their master versions tend to be hard copies stored in parliaments.<\/p>\n<p>Although the Gibraltar Government has pulled the affected webpages offline, the incident will be a timely reminder to sysadmins that basic SQL hygiene and security practices remains as important as ever.<\/p>\n<div class=\"CaptionedImage Left\" readability=\"7\"><a href=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/gib_border_agency_site.jpg\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/gib_border_agency_site.jpg?x=648&amp;y=547&amp;infer_y=1\" alt=\"Gibraltar's border agency website\" title=\"Gibraltar's border agency website\" height=\"547\" width=\"648\"><\/a><\/p>\n<p class=\"text_center\">Gibraltar&#8217;s border agency website<\/p>\n<\/div>\n<p>Until last Friday, the link on the left (in the above picture) to the Immigration Act led to another page with a search form. That form did not sanitise user inputs to prevent the execution of code \u2013 and a single <code>'<\/code> character input as a search term (an error-based injection) returned an error page confirming that fact, as well as links titled &#8220;modify\/delete&#8221; presented on public-facing webpages for each individual law.<\/p>\n<p>Using open-source penetrating testing tool <em>sqlmap<\/em>, Sharma was able to view all the tables and database information powering the law-hosting site. One such table, named <em>giblaws_giblaws.user<\/em> immediately caught his eye.<\/p>\n<p>He told <em>El Reg<\/em>: &#8220;The table contained names of staff members, usernames and password digests, etc,&#8221; adding: &#8220;sqlmap&#8217;s in-built digest-cracking tool easily cracked one of the passwords in &lt;1 second!&#8221;<\/p>\n<div class=\"CaptionedImage Center\" readability=\"8\"><a href=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/gib_gov_law_site_user_db.jpg\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2020\/01\/07\/gib_gov_law_site_user_db.jpg?x=648&amp;y=139&amp;infer_y=1\" alt=\"A screenshot of the Gibraltar Government's laws website user database, captured by Ax Sharma\" title=\"A screenshot of the Gibraltar Government's laws website user database, captured by Ax Sharma\" height=\"139\" width=\"648\"><\/a><\/p>\n<p class=\"text_center\">A screenshot of the Gibraltar Government&#8217;s laws website user database, captured by Ax Sharma<\/p>\n<\/div>\n<p>That password, said the security researcher, was six numeric digits: &#8220;perhaps a date of birth&#8221;. Using those details, it would have been a trivial exercise to log in and use the account&#8217;s privileges to edit the website&#8217;s contents.<\/p>\n<p>Although one would hope the Gibraltar Government maintains access and change controls as well as site content monitoring that would have allowed it to instantly spot such tomfoolery, <em>El Reg<\/em> can only speculate.<\/p>\n<p>A Gibraltar government spokesman thanked Sharma for &#8220;pointing out the vulnerabilities&#8221; and said: &#8220;This matter has now been dealt with and the major vulnerabilities have been mitigated. However, within the next couple of days, this section of the website will, in any event, be relocated to an entirely new website.&#8221;<\/p>\n<p>Old URLs previously leading to pages of laws currently go to 404 &#8220;not found&#8221; pages. The spokesman continued: &#8220;It should also be noted that the Government of Gibraltar website is hosted outside our corporate network and therefore the earlier vulnerabilities posed no risk to the security of the government&#8217;s communication systems.&#8221;<\/p>\n<p>It is worth noting that running <em>sqlmap<\/em> on someone else&#8217;s machine without their permission could constitute an offence under the <a target=\"_blank\" href=\"https:\/\/www.legislation.gov.uk\/ukpga\/1990\/18\/contents\" rel=\"noopener noreferrer\">UK&#8217;s Computer Misuse Act 1990<\/a>.<\/p>\n<p>Strangely, the spokesman did not comment on the possibility of anyone being able to edit laws at their leisure. Political custom is that such things normally involve politicians, brown envelopes and considerable amounts of time and effort.<\/p>\n<p>Sharma&#8217;s detailed findings are set out <a target=\"_blank\" href=\"https:\/\/medium.com\/@AkshaySharmaUS\/68d91af6b2ed?source=friends_link&amp;sk=63088c1a37523356a869988ed27bbef7\" rel=\"noopener noreferrer\">on his Medium blog<\/a>. \u00ae<\/p>\n<\/div>\n<p>READ MORE <a href=\"https:\/\/go.theregister.co.uk\/feed\/www.theregister.co.uk\/2020\/01\/07\/gibraltar_sql_vuln_allowed_law_editing\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Run sqlmap, edit online statutes, gain immunity for life? Exclusive\u00a0 A SQL injection vulnerability on the Government of Gibraltar&#8217;s website paved the way for any old Joe to rewrite official web versions of the British Overseas Territory&#8217;s laws.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":32647,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-32646","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>I&#039;m the queen of Gibraltar and will never get a traffic ticket... just two of the things anyone could have written into country&#039;s laws thanks to unsanitised SQL input vuln 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"I&#039;m the queen of Gibraltar and will never get a traffic ticket... just two of the things anyone could have written into country&#039;s laws thanks to unsanitised SQL input vuln 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-01-07T12:27:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/01\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"442\" \/>\n\t<meta property=\"og:image:height\" content=\"293\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"I&#8217;m the queen of Gibraltar and will never get a traffic ticket&#8230; just two of the things anyone could have written into country&#8217;s laws thanks to unsanitised SQL input vuln\",\"datePublished\":\"2020-01-07T12:27:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/\"},\"wordCount\":657,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/\",\"name\":\"I'm the queen of Gibraltar and will never get a traffic ticket... just two of the things anyone could have written into country's laws thanks to unsanitised SQL input vuln 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg\",\"datePublished\":\"2020-01-07T12:27:23+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg\",\"width\":442,\"height\":293},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"I&#8217;m the queen of Gibraltar and will never get a traffic ticket&#8230; just two of the things anyone could have written into country&#8217;s laws thanks to unsanitised SQL input vuln\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"I'm the queen of Gibraltar and will never get a traffic ticket... just two of the things anyone could have written into country's laws thanks to unsanitised SQL input vuln 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/","og_locale":"en_US","og_type":"article","og_title":"I'm the queen of Gibraltar and will never get a traffic ticket... just two of the things anyone could have written into country's laws thanks to unsanitised SQL input vuln 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-01-07T12:27:23+00:00","og_image":[{"width":442,"height":293,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/01\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"I&#8217;m the queen of Gibraltar and will never get a traffic ticket&#8230; just two of the things anyone could have written into country&#8217;s laws thanks to unsanitised SQL input vuln","datePublished":"2020-01-07T12:27:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/"},"wordCount":657,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/01\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/","url":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/","name":"I'm the queen of Gibraltar and will never get a traffic ticket... just two of the things anyone could have written into country's laws thanks to unsanitised SQL input vuln 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/01\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg","datePublished":"2020-01-07T12:27:23+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/01\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/01\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln.jpg","width":442,"height":293},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/im-the-queen-of-gibraltar-and-will-never-get-a-traffic-ticket-just-two-of-the-things-anyone-could-have-written-into-countrys-laws-thanks-to-unsanitised-sql-input-vuln\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"I&#8217;m the queen of Gibraltar and will never get a traffic ticket&#8230; just two of the things anyone could have written into country&#8217;s laws thanks to unsanitised SQL input vuln"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/32646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=32646"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/32646\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/32647"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=32646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=32646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=32646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}