浏览报告
14 份报告 · 本页赏金 $7,850 · 清除筛选
Payment method token being sent to 3rd party analytics service业务逻辑Upserve中危—2021-09-03DOM Based XSS via postMessage at https://inventory.upserve.com/login/跨站脚本Upserve中危$2,5002019-06-25Open redirect on https://hq-api.upserve.com/开放重定向Upserve低危—2019-06-07Reflected XSS on https://inventory.upserve.com/ (affects IE users only)跨站脚本Upserve低危$1,2002019-08-06Open redirect at https://inventory.upserve.com/http://google.com/开放重定向Upserve低危$1,2002019-06-07Reflected xss on theacademy.upserve.com跨站脚本Upserve低危—2018-09-28[theacademy.upserve.com] Reflected XSS Query-String跨站脚本Upserve低危$2502018-10-19OLO Total price manipulation using negative quantities业务逻辑Upserve高危—2019-07-06Insufficient validation of sides/modifiers quantity业务逻辑Upserve低危$5002019-06-06reports.breadcrumb.com is vulnerable for Arbitrary file existence disclosur CVE-2014-7829信息泄露Upserve低危$2002018-03-29Blind stored xss in demo form跨站脚本Upserve中危$5002018-04-12Information disclosure through search engines (password reset token)信息泄露Upserve低危—2018-03-13Ability to reset password for account访问控制Upserve高危—2019-06-06Ability to create own account UUID leads to stored XSS跨站脚本Upserve中危$1,5002019-06-10