[bug-bounty] SQL injection via user-agent

Sql Injection via the user-agent, how can this happen? well here what we need to know first is that the sql injection query that we normally use like order by 99 — - is useless we can no longer use, and here they have blocked important characters for like (‘ ’, “ ”, /, \,)etc.

ok ... most applications usually record our user-agent and through user-agents we can do sql injection.