Browse / Urban Dictionary

Urban Dictionary

See its reports on the map

What gets reported to Urban Dictionary

• Cross-site Scripting5
• Information Disclosure3
• Misconfiguration2
• Authentication2
• Open Redirect2
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. CSRF to Reflected XSS at echo.urbandictionary.biz via spoofing content typeCross-site Scripting (XSS) - Stored · medium
   87 votes
2. Users able to set video url for unpublished words and able to see the name of unpublished wordsInformation Disclosure · low
   44 votes
3. Race condition in up voting and down votingViolation of Secure Design Principles · low
   42 votes
4. Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API DocumentationImproper Restriction of Authentication Attempts
   25 votes
5. DOM XSS through adsCross-site Scripting (XSS) - DOM · medium
   18 votes
6. Bypass voting restriction due to HTTP Header InjectionCRLF Injection · medium
   17 votes
7. Race Condition in Definition VotesBusiness Logic Errors
   15 votes
8. Session replay vulnerability in www.urbandictionary.comInsufficient Session Expiration · high
   13 votes
9. Domain does not Match SSL CertificateInformativeMan-in-the-Middle
   11 votes
10. Stored XSS on urbandictionary.comCross-site Scripting (XSS) - Stored · medium
    11 votes
11. Text injection on Auth problem at urbandictionary.comViolation of Secure Design Principles
    11 votes
12. See details of a unpublished word by guessing the word IDInformation Disclosure · low
    8 votes
13. Reflective Xss Vulnerability Cross-site Scripting (XSS) - Generic
    4 votes
14. Open URL RedirectionOpen Redirect
    4 votes
15. Cross-Site Scripting Vulnerability in urbandictionary.comCross-site Scripting (XSS) - Generic
    2 votes
16. Open RedirectionOpen Redirect
    2 votes
17. URGENT - Subdomain Takeover in support.urbandictionary.com pointing to ZendeskCode Injection
    1 votes
18. Source Code DisclosureInformativeInformation Disclosure