Dxr.axd Exploit

of DevExpress ASP.NET Web Forms (specifically version 19.2.3). The handler does not properly verify referenced objects in the GET parameter.

Alex didn’t panic. He followed protocol: dxr.axd exploit