FormAssembly Bug Bounty Program Statistics

**You are viewing our old website - new website soon...!**

We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.

Stay tuned for updates coming soon!

FormAssembly Program Statistics

View program

6 total issues disclosed

$0 total paid publicly

Most disclosed (2 disclosures) — Cross-site Scripting (XSS) - Generic

Disclosed Reports

Report Title	Vulnerability Type	Disclosed By	Severity	Disclosed on
scripts loader DOS vulnerability	Improper Restriction of Authentication Attempts	badisman	Medium	2020-02-29
xmlrpc.php file is enable it will used for (DOS) and bruteforce attack	Uncontrolled Resource Consumption	meepmerp	High	2018-12-27
SSLv3 Poodle Vulnerability	Violation of Secure Design Principles	pandaonair	High	2018-11-24
XSS in api_v1	Cross-site Scripting (XSS) - Generic	ramsexy	Low	2018-01-04
XSS on username when register to proffesional account	Cross-site Scripting (XSS) - Generic	bogdantcaciuc	Low	2017-04-26
formassembly.com is vulnerable to padding-oracle attacks.	Cryptographic Issues - Generic	edoverflow	Medium	2017-03-17