HexBrain

Localize · Report #30787

PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.

Validstatus
2upvotes
17 Feb 2015disclosed

How it was found

Go to http://www.localize.im/index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000

This effectively makes it a security issue since it allows an attacker to scan for a specific vulnerable module and then exploit it.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original