Lucene search
+L

3 matches found

Hacker One
Hacker One
added 2017/10/31 11:0 a.m.36 views

International Islamic University Chittagong: Application fees changeable

When i submit the form of the Url http://119.18.148.140/iiuc/home/apply-online then I intercept the form request and change the 500 into 100. Application did not give the option to change the money but by intercepting the request we can change the money. Application should removed the application...

6.9AI score
SaveExploits0
Hacker One
Hacker One
added 2017/10/30 4:3 p.m.16 views

International Islamic University Chittagong: Information Exposure Through Directory Listing

Hi Team, I would like to report Information Exposure Through Directory Listing bug which is presented in iiucbd.com PoC: Navigate to the following Link: 'http://119.18.148.140/hrd/js/' internal pages are exposed. FIX: Disable the directory listing. Regards, mrroot...

6.8AI score
SaveExploits0
Hacker One
Hacker One
added 2017/10/30 3:16 p.m.22 views

International Islamic University Chittagong: Information Exposure Through Directory Listing

Hi Team, I would like to report Information Exposure Through Directory Listing bug which is presented in iiucbd.com PoC: Navigate to the following Link: http://www.iiucbd.com/assets/admin/js/datables/src/ There are some sensitive API methods disclosed via above link. If you feel there is no...

6.7AI score
SaveExploits0
Rows per page
Query Builder