Improper Access Control / Cross Site Scripting suffers from improper access control, persistent cross site scripting, and improper input validation vulnerabilities.

MD5 | de3eab0ce1d4e59fca59fb8cb0848dc7

Publisher: Joel Aviad Ossi

Company: Pentest <>company WebSec B.V.

Vulnerabilities: Improper access Control, Stored Cross-Site Scripting and
Improper Input Validation

Description: It is possible to inject javascript code into any DMCA account
and takeover the API Token in order to read support messages (It is also
possible to inject such code into the support ticket in order to target

Additionally it is possible to bypass any website domain verification and
issue valid DMCA Protection certificates for any domain name.


Security Risk: Critical

Related Posts