Error-based-injection

Prototype pollution which allows to run arbitrary js in admin context and retrieve the flag through the sql injection with an error based injection.