Urban Dictionary Bug Bounty Program Statistics | BugBountyHunter.com

**You are viewing our old website - new website soon...!**

We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.

Stay tuned for updates coming soon!

Urban Dictionary Program Statistics

18 total issues disclosed

$0 total paid publicly

Most disclosed (3 disclosures) — None supplied

Disclosed Reports

Report Title	Vulnerability Type	Disclosed By	Severity	Disclosed on
CSRF to Reflected XSS at echo.urbandictionary.biz via spoofing content type	Cross-site Scripting (XSS) - Stored	osama-hamad	Medium	2025-03-11
Race condition in up voting and down voting	Violation of Secure Design Principles	flashdisk	Low	2023-10-27
DOM XSS through ads	Cross-site Scripting (XSS) - DOM	bemodtwz	Medium	2022-01-18
Bypass voting restriction due to HTTP Header Injection	None supplied	schirgel	Medium	2020-07-08
Domain does not Match SSL Certificate	Man-in-the-Middle	kittiesscript	No rating	2019-05-29
Users able to set video url for unpublished words and able to see the name of unpublished words	Information Disclosure	d3f4u17	Low	2019-03-02
Source Code Disclosure	Information Disclosure	linkks	No rating	2019-01-08
See details of a unpublished word by guessing the word ID	Information Disclosure	tyagiji	Low	2018-02-12
Stored XSS on urbandictionary.com	Cross-site Scripting (XSS) - Stored	flex0geek	Medium	2018-01-11
Race Condition in Definition Votes	None supplied	cablej	No rating	2017-10-29
Session replay vulnerability in www.urbandictionary.com	Insufficient Session Expiration	tcpiplab	High	2017-06-20
Text injection on Auth problem at urbandictionary.com	Violation of Secure Design Principles	ak1t4	No rating	2017-01-17
Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API Documentation	None supplied	rchase	No rating	2016-07-24
Cross-Site Scripting Vulnerability in urbandictionary.com	Cross-site Scripting (XSS) - Generic	ishahriyar	No rating	2016-04-28
URGENT - Subdomain Takeover in support.urbandictionary.com pointing to Zendesk	Code Injection	harry_mg	No rating	2016-01-04
Reflective Xss Vulnerability	Cross-site Scripting (XSS) - Generic	alyssa_herrera	No rating	2015-09-16
Open Redirection	Open Redirect	atom	No rating	2014-07-08
Open URL Redirection	Open Redirect	mafia	No rating	2014-07-08