Authorized scanner testing only. All data in these routes is synthetic.
Reward search — string SQL injection
Query: SELECT id,title,description,points,owner_id FROM rewards WHERE title LIKE '%wallet%' OR description LIKE '%wallet%' ORDER BY id
| id | title | description | points | owner_id |
|---|---|---|---|---|
| 1 | Daily Wallet Boost | Claim a small wallet bonus | 25 | 2 |