Rating:

Blind MongoDB injection

Original writeup (http://blog.dul.ac/2014/10/SHARIF_QUALS_14/).