Plaintext submission of a password. High severity Enable SSL/TLS get a free certificate from Let's Encrypt! 836

Domain: http://bugheist.com/accounts/login/
Tweet Share
Bugheist

Reported on bugheist.com

Total # of issues reported = 212

skillfulhacking

Reported by skillfulhacking

Total Points of skillfulhacking = 12

Browser Version:

Operating System:

OS Version:

Bug Type: General
Status: closed
Added on: Nov. 16, 2016, 9:29 p.m.

Description

Screenshots:

screenshot

OCR Results:

0 Cleartext submission of password Issue: Cleartext submission of password Severity: High Confidence: Certain Host: http://www.bugheist.com Path: /accounts/login/ Issue detail The page contains a form with the following action URL, which is submitted over clear—text HTTP: O http://www.bugheist.com/accounts/login/ The form contains the following password field: 0 password

Comments:

No comment added yet. Be the first to comment!