Browse / OLX

OLX

See its reports on the map

What gets reported to OLX

• Cross-site Scripting37
• Information Disclosure8
• Misconfiguration5
• Authentication4
• Cross-Site Request Forgery3
• SQL Injection2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. XSS - main page - search[user_id] parameterCross-site Scripting (XSS) - Reflected
   137 votes
2. [Critical] Delete any account Violation of Secure Design Principles
   115 votes
3. SQL Injection on https://www.olx.co.idSQL Injection
   75 votes
4. web cache deception in https://tradus.com lead to name/user_id enumeration and other infoViolation of Secure Design Principles
   63 votes
5. SQL Injection https://www.olx.co.idSQL Injection
   54 votes
6. Reflected XSS on https://www.olx.co.id/iklan/*.html via "ad_type" parameterCross-site Scripting (XSS) - Reflected
   35 votes
7. XSS inside HTML Link TagCross-site Scripting (XSS) - Reflected
   33 votes
8. Public Vulnerable Version of Confluence https://confluence.olx.comInformation Disclosure
   31 votes
9. Reflected XSS in www.olx.co.idCross-site Scripting (XSS) - Reflected
   29 votes
10. Able to list user's public name, username, phone number, address, facebook ID...Information Disclosure
    20 votes
11. Search Page Reflected XSS on sharjah.dubizzle.com through unencoded output of GET parameter in JavaScriptCross-site Scripting (XSS) - Reflected
    19 votes
12. Updating and Deleting any Ads on OLX Philippines Cryptographic Issues - Generic
    19 votes
13. XSS Reflected at SEARCH >>Cross-site Scripting (XSS) - Reflected
    18 votes
14. Subdomain Takeover (http://docs.olx.ph/ , http://calendar.olx.ph/, http://sites.olx.ph/)Violation of Secure Design Principles
    18 votes
15. Cross Site Scripting -> Reflected XSSCross-site Scripting (XSS) - Generic
    17 votes
16. Reflective XSS at olx.phCross-site Scripting (XSS) - Reflected
    16 votes
17. I found a way to instantly take over ads by other users and change them (IDOR)Insecure Direct Object Reference (IDOR)
    14 votes
18. XSS @ *.letgo.comCross-site Scripting (XSS) - Generic
    14 votes
19. Bypass CSP frame-ancestors at olx.co.za, olx.com.ghUI Redressing (Clickjacking)
    13 votes
20. Combined attacks leading to stealing user's accountViolation of Secure Design Principles
    12 votes
21. stored XSS in olx.pl - ogloszenie TITLE element - moderator acc can be hackedCross-site Scripting (XSS) - Generic
    12 votes
22. Reflected XSS on www.olx.co.id via ad_type parameterCross-site Scripting (XSS) - Reflected
    11 votes
23. Full Account Takeover Improper Authentication - Generic
    11 votes
24. Manipulating joinolx.com Job Vacancy alert subscription emails (HTML Injection / Script Injection)Cross-site Scripting (XSS) - Generic
    11 votes
25. Bypass Rejected ads so user can view it as normal live ad.Improper Access Control - Generic
    10 votes
26. Reflected XSS on m.olx.co.id via ad_type parameterCross-site Scripting (XSS) - Reflected
    10 votes
27. Stored XSS in buy topup OLX Gold Credits Cross-site Scripting (XSS) - Generic
    10 votes
28. Unauthorised access to olx.in user accounts. Improper Authentication - Generic
    10 votes
29. Arbitrary File ReadingPath Traversal
    10 votes
30. XSS @ yaman.olx.phCross-site Scripting (XSS) - Generic
    10 votes
31. All Active user sessions should be destroyed when user change his password!Improper Authentication - Generic
    10 votes
32. load scripts DOS vulnerabilityUncontrolled Resource Consumption
    9 votes
33. Multiple vulnerabilities in http://blog.dubizzle.com/uaeCross-site Scripting (XSS) - Generic
    9 votes
34. blog.praca.olx.pl database credentials exposureInformation Disclosure
    8 votes
35. Reflected XSS in www.olx.phCross-site Scripting (XSS) - Generic
    8 votes
36. CSRF in account configuration leads to complete account compromiseCross-Site Request Forgery (CSRF)
    8 votes
37. XSS in OLX.pl ("title" in new advertisement)Cross-site Scripting (XSS) - Stored
    7 votes
38. Directory Listing of all the resource files of olx.com.eg Information Disclosure
    7 votes
39. Name, email, phone and more disclosure on user ID (API)Information Disclosure
    7 votes
40. XSS on Meta Tag at https://m.olx.phCross-site Scripting (XSS) - Generic
    7 votes
41. yaman.olx.ph/wordpress is using a very vulnerable version of WordPress and contains directory listingCross-Site Request Forgery (CSRF)
    6 votes
42. Reflected XSS in [olx.qa]Cross-site Scripting (XSS) - Generic
    6 votes
43. CSRF in delete advertisement on olx.com.egCross-Site Request Forgery (CSRF)
    6 votes
44. Reflective XSS at m.olx.phCross-site Scripting (XSS) - Generic
    6 votes
45. XSS on Home page olx.com.ar via auto save search textCross-site Scripting (XSS) - Generic
    6 votes
46. XSS yaman.olx.phCross-site Scripting (XSS) - Generic
    6 votes
47. XSS @ *.olx.com.arCross-site Scripting (XSS) - Generic
    6 votes
48. Reflected XSS in olx.ptCross-site Scripting (XSS) - Generic
    5 votes
49. Reflected XSS at m.olx.phCross-site Scripting (XSS) - Generic
    5 votes
50. Bypassing Phone Verification For Posting AD On OLXImproper Authentication - Generic
    5 votes
51. Stored XSS on contact nameCross-site Scripting (XSS) - Generic
    5 votes
52. Reflected XSS in OLX.inCross-site Scripting (XSS) - Generic
    4 votes
53. full path disclosure vulnerability at https://security.olx.com/*Information Disclosure
    4 votes
54. these are my old reports and still i have not receive any good replys, these all are Cross Site Scripting(XSS) issues: POC1: https://www.youtube.com/wCross-site Scripting (XSS) - Generic
    4 votes
55. REFLECTED CROSS SITE SCRIPTING IN OLXCross-site Scripting (XSS) - Generic
    4 votes
56. Reflected XSS at yaman.olx.phCross-site Scripting (XSS) - Generic
    4 votes
57. OLX is vulnerable to clickjaking
    3 votes
58. Reflective XSS at dubai.dubizzle.comCross-site Scripting (XSS) - Generic
    3 votes
59. XSS and HTML Injection https://sharjah.dubizzle.com/Cross-site Scripting (XSS) - Generic
    3 votes
60. cross-site scripting in get requestCross-site Scripting (XSS) - Generic
    3 votes
61. Server Version Of https://www.olx.ph/Information Disclosure
    2 votes
62. olx.ph is vulnerable to POODLE attackCryptographic Issues - Generic
    2 votes
63. Full path disclosure vulnerability at http://corporate.olx.phInformation Disclosure
    2 votes
64. XSS and Open Redirect on https://jobs.dubizzle.com/Cross-site Scripting (XSS) - Generic
    2 votes
65. xss yaman.olx.phCross-site Scripting (XSS) - Generic
    2 votes
66. Reflected Cross Site scripting Attack (XSS)Cross-site Scripting (XSS) - Generic