HexBrain
Open on HackerOneSign in

C2FO · Report #39198

[admin.c2fo.com] Open Redirect

Validstatus
10upvotes
29 Oct 2016disclosed

How it was found

PoC (FireFox): https://admin.c2fo.com///www.google.com/%2e%2e

HTTP Request: GET ///www.google.com/%2e%2e HTTP/1.1 Host: admin.c2fo.com

HTTP Response: Location: //www.google.com/%2e%2e/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original