Eobot: Multiple information disclosure

2014-11-30T09:33:05
ID H1:37862
Type hackerone
Reporter psych0tr1a
Modified 2014-12-01T23:05:47

Description

This script can help hackers check leaked email bases on registration with eobot without ban and etc.. https://www.eobot.com/checkemail2.aspx?email=girlboy44@hotmail.com

email disclosure in google google dork: site:eobot.com inurl:"widget.aspx"

in result we see requests with email of your users