Browse / RelateIQ

RelateIQ

See its reports on the map

What gets reported to RelateIQ

• Misconfiguration4
• Cryptography4
• Cross-site Scripting3
• Information Disclosure2
• Cross-Site Request Forgery1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. HTML injection in "Invite Collaborators"Cross-site Scripting (XSS) - Generic
   9 votes
2. Wildcard DNS in websiteViolation of Secure Design Principles
   7 votes
3. TRACE disclosure attack may be possibleInformation Disclosure
   6 votes
4. Resubmitted with POC #18685 Password reset CSRFCross-Site Request Forgery (CSRF)
   5 votes
5. Cross Site Scripting (XSS) - app.relateiq.comCross-site Scripting (XSS) - Generic
   5 votes
6. Value of JSESSIONID and XSRF token parameter in cookie remains same before and after loginViolation of Secure Design Principles
   5 votes
7. PoodleBleedCryptographic Issues - Generic
   4 votes
8. Captcha Bypass With ExtensionCryptographic Issues - Generic
   4 votes
9. Relateiq SSLv3 deprecated protocol vulnerability.Cryptographic Issues - Generic
   3 votes
10. SSRF (Portscan) via Register Function (Custom Server)Violation of Secure Design Principles
    3 votes
11. Failed Certificate Validation On Custom Server (Register)Cryptographic Issues - Generic
    3 votes
12. Old Sessions remain valid after the password change.InformativeImproper Authentication - Generic
    3 votes
13. RelateIQ GWT based application visible to unauthenticated usersInformativeInformation Disclosure
    3 votes
14. Cross-site Scripting in mailing (username)Cross-site Scripting (XSS) - Generic
    2 votes
15. XSRF token problemViolation of Secure Design Principles
    1 votes
16. open redirectInformativeOpen Redirect
    1 votes