HexBrain
Open on HackerOneSign in

Khan Academy · Report #6564

Open Redirection in SmartHistory KhanAcademy

Validstatus
5upvotes
9 Apr 2014disclosed

How it was found

Proof: http://smarthistory.khanacademy.org/assets/images/media/player.swf?displayclick=link&link=http://google.com&file=1.jpg

STEPS: Click the link after clicking click the SCREEN and you will be redirected to http://google.com

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original