Browse / Judge.me

Judge.me

See its reports on the map

What gets reported to Judge.me

• Cross-site Scripting11
• Code Execution2
• Business Logic2
• Insecure Direct Object Reference1
• Access Control1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Stored XSS in Email Templates via linkCross-site Scripting (XSS) - Stored · medium
   $50081 votes
2. Blind XSS via Feedback form.Cross-site Scripting (XSS) - Stored · high
   57 votes
3. Email templates XSS by filterXSS bypassCross-site Scripting (XSS) - Generic · high
   $1,25051 votes
4. IDOR: leak buyer info & Publish/Hide foreign commentsInsecure Direct Object Reference (IDOR) · high
   $1,25047 votes
5. Log4j RCE on https://judge.me/reviewsCode Injection
   $5040 votes
6. Stored XSS in "product type" field executed via product filtersCross-site Scripting (XSS) - Stored · medium
   $50030 votes
7. Race condition on https://judge.me/peopleConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') · low
   $25026 votes
8. Stored XSS in Public Profile ReviewsCross-site Scripting (XSS) - Stored
   $25025 votes
9. Improper Access Control in Ali Express ImporterImproper Access Control - Generic · medium
   21 votes
10. XSS in Widget Review Form Preview in settingsCross-site Scripting (XSS) - Stored · medium
    16 votes
11. stored XSS on AliExpress Review Importer/Products when delete productCross-site Scripting (XSS) - Stored · medium
    $50015 votes
12. Self-XSS due to image URL can be eploited via XSSJacking techniques in review emailCross-site Scripting (XSS) - Generic · medium
    14 votes
13. The response shows the nginx versionInformativeInformation Exposure Through Sent Data
    12 votes
14. Stored XSS in Question edit for product name (bypass #1416672)Cross-site Scripting (XSS) - Stored · medium
    $50011 votes
15. Stored XSS in Question edit from product nameCross-site Scripting (XSS) - Stored · medium
    $5007 votes
16. Error Page Content Spoofing or Text InjectionN/ABusiness Logic Errors
    6 votes
17. HTML INJECTION (STORED)InformativeImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
    6 votes
18. HTML injection in review contentInformativeCommand Injection - Generic
    4 votes