Browse / Tennessee Valley Authority

Tennessee Valley Authority

See its reports on the map

What gets reported to Tennessee Valley Authority

• Information Disclosure2
• Authentication1
• Business Logic1
• SQL Injection1
• Access Control1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. access to profile & reset password page without authenticationInformativeImproper Authentication - Generic · medium
   68 votes
2. captcha bypass leads to register multiple user with one valid captchaInformativeBusiness Logic Errors · medium
   50 votes
3. File listing through scripts folderFile and Directory Information Exposure
   42 votes
4. internal path disclosure via register errorInformativeInformation Exposure Through an Error Message · low
   36 votes
5. SQL Injection on https://soa-accp.glbx.tva.gov/ via "/api/" path - VI-21-015SQL Injection · critical
   30 votes
6. Incorrect Authorization leads to see other users Documents UploadedInformativeIncorrect Authorization · medium
   29 votes