Unikrn · Report #503300

█████████ on CRM server without authorization

Validstatus

15upvotes

14 Mar 2019disclosed

How it was found

The https://crm.unikrn.com/███████ file is available on the server https://crm.unikrn.com without authorization. Anyone can run this script. How to classify this vulnerability - leave the right for you.

Anyone can run this script.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original