HTB Writeup – Gavel Posted on 2025-11-30 SQL injection abusing PDO substitution in PHP Prepared Statement