Algolia · Report #173417
Possilbe Sub Domain takever at prestashop.algolia.com
Validstatus
9upvotes
4 Nov 2016disclosed
How it was found
Hey Sir
It looks like prestashop.algolia.com has a A record pointing to 178.62.8.144
But when you visit prestashop.algolia.com you see a page hosted by "BC WebSolution" and I couldn't find any relation with Algolia
Now what's suspicious here is http://178.62.8.144/ also serves the content of "BC WebSolution"
Maybe the IP is in no more control of Algolia and has been allocated someone else while the DNS record at Algolia.com still point to the old IP
If I am correct any vulnerability like XSS, File upload affecting the IP can be used in scope of prestashop.algolia.com