BYPASSING AIRPORT SECURITY VIA SQL INJECTION

Summary from the TLDR Web Dev newsletter

The authors of this article discovered a critical vulnerability in FlyCASS, a system used by smaller airlines to participate in the TSA's Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs. They exploited a SQL injection flaw to gain administrative access to FlyCASS, allowing them to add unauthorized individuals to the KCM and CASS programs, bypass security screening, and gain access to cockpits.