Uber · Report #125181

SQLi in love.uber.com

Validstatus

4upvotes

25 Apr 2016disclosed

Summary

@iad found an SQL Injection vulnerability in one of our Wordpress blog's plugins (the website being love.uber.com). This blog was hosted at WPEngine and did not contain any of our user's information. However due to our previously vague bug bounty rules we decided to reward the maximum of 3,000$ since we were not previously clear that these were maximums. Opting for limited disclosure as password hashes are disclosed in the report which we need to ensure have been rotated properly.

Vulnerability was found in WPML module. Kudos to Jouko Pynnönen, who found this bug in WPML module ( https://klikki.fi/adv/wpml.html )

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original