http://tweedgbwjchsbiofbshntdnkkehlsuehkdkglu4jpr4fli5du33444qd.onion/2021/disclosing-wsdot-sqli
Thank you to WSDOT for resolving this so quickly, even after an exhausting December and fresh out of the holiday season. Now, on to the fun stuff! What was the vulnerability? The vulnerability itself was a trivially exploitable SQL injection in WSDOT’s website.