HexBrain

Ian Dunn · Report #176599

No CAPTCHA ia exist in pages

Informativestatus
2upvotes
23 Nov 2016disclosed

How it was found

No CAPTCHA is exist in the "Wordpress-backup-options" and "contact" pages. Due to the fact that the webpage has no CAPTCHA mechanism any attacker can perform DOS/DDOS attack and perform Daniel of Service attack to the server.

Links: Wordpress-backup-options page: https://iandunn.name/2012/02/03/wordpress-backup-options/

Contact page: https://iandunn.name/contact/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original