Whitehack Information Security Consultant Finds Critical Vulnerability within AVG Owned Domain

Whitehack Information Security consultant Griffin Francis has recently been acknowledged by AVG for finding a critical SQL Injection vulnerability within one of their active sub-domains. The vulnerability which was reported could have enabled an attacker to be able to obtain the database for one of AVG’s live services.

Griffin a proud member at Whitehack is a long standing member of the bug bounty community which enables researchers such as himself to find vulnerabilities which can be found on services as to which millions of people use on a daily basis. Within the past Griffin has been acknowledged by Apple, Mozilla, Oracle, Google, United Airlines, Yahoo, Riot Games, AT&T and multiple other sites for reporting high profile issues.

Timeline
Issue Reported – 17/7/2016
Issue Confirmed and Triaged – 17/7/2016
Issue Patched – 21/7/2016