Browse / Uzbey

Uzbey

See its reports on the map

What gets reported to Uzbey

• Cross-site Scripting5
• Misconfiguration5
• Information Disclosure4
• Other weaknesses4
• SQL Injection2
• Denial of Service2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Information Disclosure (phpinfo())Information Disclosure
   6 votes
2. test
   5 votes
3. Missing "size check" on files to upload could make memory leaks.Memory Corruption - Generic
   5 votes
4. SQL InjectionSQL Injection
   4 votes
5. XSS in 3rd party plugin (not affecting Uzbey's users)Cross-site Scripting (XSS) - Generic
   3 votes
6. Email Flooding VulnViolation of Secure Design Principles
   3 votes
7. HTML Form Without CSRF Protection VulnerabilityInformativeCross-Site Request Forgery (CSRF)
   3 votes
8. CMS Information DisclosureInformation Disclosure
   3 votes
9. All Active user sessions should be destroyed when user change his password!Improper Authentication - Generic
   3 votes
10. TestInformation Disclosure
    2 votes
11. IFXSS (image filename XSS) by creating a new Photo GalleryCross-site Scripting (XSS) - Generic
    2 votes
12. Mass invitation sendInformative
    2 votes
13. Price ManipulationViolation of Secure Design Principles
    2 votes
14. Cross site scripting in type parameterCross-site Scripting (XSS) - Generic
    2 votes
15. email field doesn't filtered against XSSCross-site Scripting (XSS) - Generic
    2 votes
16. Language version disclosure in response header Violation of Secure Design Principles
    2 votes
17. Missing HSTS (Strict Transport Security)Violation of Secure Design Principles
    2 votes
18. Album image XSSCross-site Scripting (XSS) - Generic
    2 votes
19. SQL injection, time zoom script, tile IDSQL Injection
    2 votes
20. SQL injection, tile IDCommand Injection - Generic
    2 votes
21. Suck My Motherfucking DickDenial of Service
    1 votes
22. Test
    1 votes
23. Flash Content-Type Sniffing Vulnerability
    1 votes
24. Clickjacking at https://staging.uzbey.com/InformativeUI Redressing (Clickjacking)
    1 votes
25. Breach Attack VulnerabilityInformativeInformation Disclosure
    1 votes
26. Cross-site scripting vulnerability detectedUncontrolled Resource Consumption
    1 votes