open redirect

Disclosed: 2014-05-19 08:37:33 By niks To relateiq
Unknown
Vulnerability Details
1. go to https://www.relateiq.com/sign-up 2. Fill the form and click on signup free button. 3. Intercept the request using tamper data and change the 'retURL' parameter to any value like https://google.com (any evil url) and submit the request. 4. The web app redirect to any evil website.
Actions
View on HackerOne
Report Stats
  • Report ID: 2414
  • State: Closed
  • Substate: informative
  • Upvotes: 1
Share this report