Loading HuntDB...

8x8 - HackerOne Reports

View on HackerOne
70
Total Reports
6
Critical
20
High
27
Medium
17
Low
Weakness: Improper Input Validation
Weakness: SQL Injection
Weakness: Cross-site Scripting (XSS) - Reflected
Medium
Weakness: Cross-site Scripting (XSS) - Reflected
Weakness: Open Redirect
High
Weakness: Command Injection - Generic
Weakness: Cross-site Scripting (XSS) - Generic
Weakness: Code Injection
Weakness: Cleartext Storage of Sensitive Information

Stored XSS agent_status

Reported by: madrobot | Disclosed:
High
Weakness: Cross-site Scripting (XSS) - Stored
Weakness: Improper Authentication - Generic
Weakness: Privilege Escalation
Weakness: Improper Access Control - Generic
Weakness: Information Disclosure
Weakness: Privilege Escalation

xmlrpc.php file enabled

Reported by: p4nk4jv | Disclosed:
Medium
Weakness: Server-Side Request Forgery (SSRF)
Weakness: Code Injection
Weakness: Information Exposure Through Directory Listing
Weakness: File and Directory Information Exposure
Weakness: Information Disclosure
Page 1 of 4 Next