HexBrain

IRCCloud · Report #13634

Missing Character Restriction

Informativestatus
2upvotes
17 Nov 2014disclosed

How it was found

In the team adding page , the team name has no restrictions in the input field. In the poc i have named the team as !@#$%^&*() which is fully of symbols.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original