Browse / Phabricator

Phabricator

See its reports on the map

What gets reported to Phabricator

• Access Control12
• Information Disclosure12
• Authentication11
• Misconfiguration7
• Cross-site Scripting6
• Cross-Site Request Forgery6

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Issue:Form does not contain an anti-CSRF tokenN/ACross-Site Request Forgery (CSRF) · high
   8 votes
2. Request vulnerable to CSRFN/ACross-Site Request Forgery (CSRF) · high
   5 votes
3. The mailbox verification API interface is unlimited and can be used as a mailbox bombN/AImproper Access Control - Generic · medium
   5 votes
4. Broken Authentication and Session Management lead to take over accountN/AImproper Access Control - Generic · high
   4 votes
5. Error page Text Injection.N/AViolation of Secure Design Principles
   4 votes
6. link reset problemN/A
   3 votes