HackerOne: Edit Auto Response Messages

Not completely sure if this is by design due to encountering it for the first time. When a company has auto response turned on, the reporter can change the contents of the message without any problems. The reporter should not be able to change the contents of the companies auto response in any wa...

rezervi27-rfi.txt

------=Part10021926781377.1177148481272 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline App: Rezervi Availability 2.7 Source: http://www.rezervi.com/www/german/download/rezerviV27.zip Author: Arham Muhammad Vulnerable File:...