HexBrain

WebSummit · Report #172746

WebSummit - Open Redirect

Validstatus
3upvotes
30 Sept 2016disclosed

How it was found

Same Open Redirect issue at 3 websites:

-https://forms.moneyconf.com/gates Post data: phone_number=922+222+222&full_number=%2B351922222222aaaaaaaaaaaa&referrer=http://openbugbounty.org&slug=+moneyconf_17_exhibitor_17

-https://forms.collisionconf.com/gates Post data: phone_number=914+444+444&full_number=%2B35191444444aaaaaaaa4&referrer=http://openbugbounty.org&slug=collision_startups_alpha

-https://forms.websummit.net/gates Post data: phone_number=916+666+765&full_number=%2B351916666765aaaaaaa&referrer=http://openbugbounty.org&slug=ws16_alpha_14sept

Thanks!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original