Lab45 Program Statistics

View program

11 total issues disclosed

$0 total paid publicly

Most disclosed (5 disclosures) — Cross-Site Request Forgery (CSRF)

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
IDOR at https://fast.trychameleon.com/observe/v2/profiles/ via uid parameter discloses users' PII data Information Disclosure cankat Medium 2021-02-03
CSRF on https://apps.topcoder.com/wiki/users/editmyprofilepicture.action Cross-Site Request Forgery (CSRF) meryem0x Medium 2020-12-14
CSRF on https://apps.topcoder.com/wiki/pages/doattachfile.action Cross-Site Request Forgery (CSRF) meryem0x Medium 2020-12-14
Reflected XSS on https://apps.topcoder.com/wiki/pages/createpage.action Cross-site Scripting (XSS) - Reflected meryem0x Medium 2020-05-12
Stored XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action Cross-site Scripting (XSS) - Stored meryem0x High 2020-05-12
Reflected XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action Cross-site Scripting (XSS) - Reflected meryem0x Medium 2020-05-12
Reflected XSS on error page on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action Cross-site Scripting (XSS) - Reflected meryem0x Medium 2020-05-12
Post Based Reflected XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action Cross-site Scripting (XSS) - Reflected meryem0x Medium 2020-05-12
CSRF on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action Cross-Site Request Forgery (CSRF) meryem0x Medium 2020-05-12
CSRF on https://apps.topcoder.com/wiki/users/editmyprofile.action Cross-Site Request Forgery (CSRF) meryem0x Medium 2020-05-12
CSRF on https://apps.topcoder.com/wiki/users general and email preferences Cross-Site Request Forgery (CSRF) meryem0x Medium 2020-05-12