Browse / Ian Dunn

Ian Dunn

See its reports on the map

What gets reported to Ian Dunn

• Cross-site Scripting9
• Information Disclosure8
• Code Execution6
• Other weaknesses4
• Misconfiguration3
• Cryptography2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commandshigh
   47 votes
2. CSV Injection at Camptix Event TicketingCommand Injection - Generic
   15 votes
3. XSSI: Quick Navigation Interface - leak of private page/post titlesInformation Disclosure · medium
   $5014 votes
4. Formula injection via CSV exports in WordCamp Talks pluginCommand Injection - Generic · medium
   $5013 votes
5. Multiple XSS in Camptix Event Ticketing PluginCross-site Scripting (XSS) - Generic
   10 votes
6. unchecked unserialize usages in audit-trail-extension/audit-trail-extension.phpmedium
   $509 votes
7. constant cache_page_secret in regolith
   $257 votes
8. unchecked unserialize usage in WordPress-Functionality-Plugin-Skeleton/functionality-plugin-skeleton.php
   $257 votes
9. Bypassing CSV injection using new line charcterCommand Injection - Generic · low
   5 votes
10. Stored XSS from ticket messages in admin table in SupportFlowCross-site Scripting (XSS) - Generic
    $505 votes
11. Stored XSS in SupportFlow Ticket SubjectCross-site Scripting (XSS) - Generic
    $505 votes
12. CSV Injection in CamptixCommand Injection - Generic · low
    4 votes
13. Bypass fix in https://hackerone.com/reports/151516 report.Command Injection - Generic · low
    $1004 votes
14. Xss in CampTix Event TicketingCross-site Scripting (XSS) - Generic
    4 votes
15. Stored XSS in all fields in Basic Google Maps Placemarks SettingsCross-site Scripting (XSS) - Generic
    $252 votes