Open on HackerOneSign in

Legal Robot · Report #164137

Possible content spoofing due to missing error page

Validstatus

2upvotes

6 Sept 2016disclosed

How it was found

the domain https://www.legalrobot-uat.com is vulnerable to content spoofing. visit the following link for POC.

https://www.legalrobot-uat.com/%0D%0AContent-Type%3A%20text%2Fhtml%0D%0A%0D%0AIt%20has%20been%20changed%20by%20a%20new%20one%20https://www.Attacker.com%20so%20go%20to%20the%20new%20one%20since%20this%20one

kindly find attached image.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original