Browse / Boozt Fashion AB

Boozt Fashion AB

See its reports on the map

What gets reported to Boozt Fashion AB

• Authentication8
• Misconfiguration7
• Information Disclosure4
• Cross-site Scripting3
• Other weaknesses2
• Denial of Service2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Host header poisoning leads to account password reset links hijackingInformation Disclosure
   43 votes
2. Email link poisoning / Host header attack
   $20038 votes
3. Git available containing passwords. Privilege Escalation
   $40024 votes
4. [www.boozt.com] - Authentication bypassImproper Authentication - Generic
   $20023 votes
5. xss in Theme http://bztfashion.booztx.comCross-site Scripting (XSS) - Generic
   $25015 votes
6. Potential Subdomain Takeover PossibleMisconfiguration
   $12014 votes
7. Instance of Apache Vulnerable to Several IssuesDenial of Service
   $8012 votes
8. Users Unable to login using Gmail/Facebook on https://boozt-stage1.booztx.com/loginImproper Authentication - Generic
   $1009 votes
9. PHP info page disclosure on http://www.day.dk/Information Disclosure
   $609 votes
10. User Enumeration. Information Disclosure
    9 votes
11. Reflected XSS on www.boozt.comCross-site Scripting (XSS) - Generic
    $1009 votes
12. Http header injectionViolation of Secure Design Principles
    7 votes
13. booztfashion.com URL should HTTPS
    6 votes
14. Weak PasswordViolation of Secure Design Principles
    $606 votes
15. XSSCross-site Scripting (XSS) - Generic
    $1206 votes
16. Email spoofing at booztlet.comViolation of Secure Design Principles
    4 votes
17. Bruteforce Unlimited number of password attemptsImproper Restriction of Authentication Attempts
    3 votes
18. Password reset token issueImproper Authentication - Generic
    $603 votes
19. Application code is not obfuscated -- OWASP M9 (2016)Violation of Secure Design Principles
    3 votes
20. Make victim buy in attacker's account without any idea - http://www.booztlet.com/Improper Authentication - Generic
    $803 votes
21. Bypass email validity in newsletter fieldViolation of Secure Design Principles
    2 votes
22. Android app does not use SSL for loginCryptographic Issues - Generic
    2 votes
23. No Session change on Password changeInsufficient Session Expiration
    1 votes
24. ADB Backup is enabled within AndroidManifestInformation Disclosure
    1 votes
25. Broken Authentication and Session Management(Session Fixation)Improper Authentication - Generic
    1 votes
26. No csrf protection on logoutViolation of Secure Design Principles
    1 votes
27. No Confirmation During Email ChangeUncontrolled Resource Consumption
28. Cookie MisconfigurationImproper Authentication - Generic