+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Big company online store mailing security problem (/showthread.php?tid=5926331)
Big company online store mailing security problem - Sophoclito - Jan 5, 2019
Hola
I was scripting some unfriendly stuff and ran into a security problem on a website of a big company.
Shit isn't "critical" as in server/db exploit, it's just a mailing form issue : their servers can be used to send unlimited mails to any email.
Now my question is, do I report or keep to myself ? (can be used to heavily spam anyone with legit mails from a legit company with fast servers = total anonimity and pretty efficient)
RE: Big company online store mailing security problem - t0deep4chan - Jan 5, 2019
You should report it since it's quite a major issue that could be used to phish users.
RE: Big company online store mailing security problem - dingdog7 - Jan 5, 2019
If it's a big company, then report it.You might get a certificate, which can help future pentesting careers.
RE: Big company online store mailing security problem - V3N0M - Jan 6, 2019
Report it and ask for money or certificate or job.