Browse / DRIVE.NET, Inc.

DRIVE.NET, Inc.

See its reports on the map

What gets reported to DRIVE.NET, Inc.

• Authentication5
• Misconfiguration1
• Other weaknesses1
• Cross-site Scripting1
• Cross-Site Request Forgery1
• Business Logic1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [www.drive2.ru] There is no rate limit for comments endpoints.Violation of Secure Design Principles · low
   54 votes
2. Same site Scripting low
   49 votes
3. [www.drive2.ru] Insufficient Security Configurability - The user can using the same password as your current ID.Improper Authentication - Generic · low
   45 votes
4. Хранимый XSS в Business-аккаунте, на странице компанииCross-site Scripting (XSS) - Stored · high
   36 votes
5. [www.drive2.ru] Insufficient Security Configurability - The user's can set an existing password as a new password.Improper Authentication - Generic · low
   30 votes
6. [www.drive2.ru] Insufficient Security Configurability - Notification email is not sent when email is changed.Improper Authentication - Generic · low
   27 votes
7. [www.drive2.ru] CSRF through FCTX token bypassCross-Site Request Forgery (CSRF) · medium
   26 votes
8. [www.drive2.ru] Insufficient Security Configurability - Notification message not sent when account is deletedBusiness Logic Errors · low
   16 votes
9. [www.drive2.ru] Insufficient Security Configurability - Email notification is not being sent while changing passwordsImproper Authentication - Generic · low
   16 votes
10. Testing for arbitrary HTTP methodsInformation Exposure Through an Error Message · low
    16 votes
11. [www.drive2.ru] Insufficient Session Expiration - Previously issued email change tokens do not expire upon issuing a new email change tokenInsufficient Session Expiration · low
    11 votes