The incident results in huge losses of revenue as a result their mobile app service is withdrawn. Investigators discovered a vulnerability attackers exploited in the HTML5 used to build the app. The vulnerability concerns the use of customized queries, which bypass the mobile app login process. What type of attack was used?