Wednesday, 23 November 2016

Yahoo Web Security Bug Bounty : Phpmyadmin access make data on risk

Yahoo Web Security Bug Bounty :  Phpmyadmin access make data on risk



 

Little Insight: 


 Vulnerability in Yahoo bug bounty  data on risk 


Vulnerable Website: 

http://tw.page.games.yahoo.net/phpmyadmin/setup/index.php?page=form&formset=Left_frame#tab_Left_tables


Impact: As you can see in the following screenshot I managed to login into phpmyadmin




 


Reward For  Phpmyadmin access  Vulnerability  : 500$

 

More Information

Thank you for your report, normally this would be out of scope but we felt this was a good find and we awarded a discretionary bounty.

The vulnerability mentioned here has been confirmed patched by the Yahoo Security Team.

 

39 comments:

  1. Replies
    1. Great Article
      Cyber Security Projects

      projects for cse

      Networking Projects

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

      Delete
    2. The best budget gaming chair we've tested? That's the GTRacing Pro (£149). It's a classic design that makes compromises in all the right A good gaming chair therefore adapts to the body of the person sitting and supports him or her. On this page you will find the best cheap gaming chairs best budget gaming chair

      Delete
  2. Replies
    1. The best Bluetooth keyboards bluetooth keyboard. Logitech K780 Multi-Device Wireless Bluetooth Keyboard Razer's first productivity keyboard blurs the line between gaming and office gear, and that's a good thing. Pros. Razer Orange switches.

      Delete
  3. Vulnerability has been patched before this post has been published. Thanks for the information.

    ransomware data recovery

    ReplyDelete
  4. Nice article excellent information thanks for sharing.


    Download Instagram Plus Apk

    ReplyDelete
  5. Steps to Download McAfee

    Go to McAfee.com/Activate.
    By then move to My Account > Sign-in and fill your Email capabilities.
    Followed by Downloads portion >
    Select your working structure > Antivirus.
    click Save and pick the downloading organizer.
    visit:
    mcafee.com/activate

    ReplyDelete
  6. Few steps for installing, and activating the Office setup. To enter the product key, click on
    office.com/setup

    ReplyDelete
  7. Replies
    1. The best laptop you can buy overall is the MacBook Air. From budget options to machines for video editing, here are all of the best laptops that are affordable and come with great performance. If you're looking for a new budget-friendly best budget laptops

      Delete
  8. wonderful blog post i really like to read it thanks for sharing sharing also share it on OGWhatsApp

    ReplyDelete
  9. SSC Exam Result is a trending now in Bangladesh. SSC Examination was completed. All students are waiting to get their SSC Exam Result 2020. This year SSC Result 2020 will publish on 1st week in May. On the result day, after 12PM all students will get their SSC Exam Result 2020 from Bangladesh Education Board official website. Also Dakhil Result 2020 and SSC Vocational Result 2020 will publish on 6 May 2020

    ReplyDelete
  10. SSC Exam Result 2020 in Bangladesh. SSC Result coming soon. All students are waiting to get their SSC Result 2020. This year SSC Result 2020 will publish on 06 May 2020. Students can collect their SSC Result 2020 from Bangladesh Education Board official website.

    ReplyDelete
  11. HSC Examination was completed few days ago. Now HSC Result is the trending topic in Bangladesh. All candidates will check their HSC Result 2020 from Bangladesh Educational official website at educationboardresults.gov.bd.

    ReplyDelete
  12. Do you want to watch all upcoming latest Hollywood and Bollywood movies? If you are movie lover. You can watch all latest Hindi, Tamil, English Movie to online. Visit the Movierulz website 2020 to get all new movie and also you can check Movierulz New link 2020 form here.

    ReplyDelete
  13. Great tips and very easy to understand. This will definitely be very useful for me when I get a chance to start my blog.

    gbwhatsappfree.com/gbwhatsapp-pro-8-10-8-20

    ReplyDelete
  14. Really impressed! Everything is very open and very clear clarification of issues. It contains truly facts. Your website is very valuable. Thanks for sharing.

    notepad++ download 64 bit

    ReplyDelete
  15. 123movies. looking for in this blog does not exist.

    ReplyDelete
  16. movies123 Sorry, the page you were looking for in this blog does not exist.

    ReplyDelete
  17. KineMaster Apk is a Video Editor Apk for Android, Chrome OS, iPhone, and iPad. Million and Million Video edito using Kinemaster Pro Apk for Android. It is a very simple and popular apk. You can make your video hight quality and professionaly. Now Kinemaster is avilable for Windows and MAC. You can download Kinemaster For PC to edit your videos.

    ReplyDelete
  18. Nice write up,it very helpful. The bug would made you loos most data's. Love from Instagram plus community

    ReplyDelete

  19. Thanks for sharing this post.
    WhatsApp Plus
    is the newly underdevelopment WhatsApp mod, but its most popular than other mod versions.

    ReplyDelete
  20. Best Packers and Movers in Pakistan
    Punjab packers and movers are the best moving company in Pakistan, offering high-quality .House Moving, office shifting, Home Moving and goods, moving services at affordable prices all over the Pakistan.House Moving

    ReplyDelete
  21. Best Packers and Movers in Pakistan
    Punjab packers and movers are the best moving company in Pakistan, offering high-quality .House Moving, office shifting, Home Moving and goods, moving services at affordable prices all over the Pakistan.House Moving

    ReplyDelete

  22. https://www.instagram.com/punjabmovers/
    https://twitter.com/punjabmovers
    https://www.facebook.com/punjabmoversandpackers
    https://www.pinterest.com/punjabmovers/
    https://www.youtube.com/channel/UC0M7HO4NqSw4YORxGm7TIQw
    https://punjabmovers.tumblr.com/

    ReplyDelete
  23. Nice article excellent information thanks for sharing.
    if anyone want to play a game with me so send to challange me. Clash of Lights

    ReplyDelete
  24. If anybody want see the real racing game so please check it. Blackmart

    ReplyDelete
  25. That is why I use Google and use security



    FMWA

    ReplyDelete
  26. wavepad-sound-editor-crack secret's a person-pleasant and complete software program this is well suited with both experts and beginners. it is very clean to operate software and does no longer calls for any particular ability to be operated with. It presents you with a gaggle of exceptional functions and effects. additionally, it lets in you to edit your audios, split them, rip them, or maybe permit you to mix special audio clips to make a new tune. it's miles the great audio enhancing software program you could use to increase your productivity and creativity. Wavepad sound editor is available in a completely intuitive and expert-searching interface this is both smooth to apprehend and easy to function.

    ReplyDelete
  27. still do see the app in Google Play. Do you? Here's the link highways or with powerful

    ReplyDelete
  28. https://ziapc.org/
    I will try some of these sites on this Blog Commenting site exactly what I look for. Such good information shared with as these sites are really helpful for my website for doing SEO thanks for sharing your post.

    ReplyDelete