Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

please add this Unpublicly Paths in seclist that can leads to Mass Account Takeover And Sql on Oracle E-Business. #787

Closed
un9nplayer opened this issue Jul 1, 2022 · 5 comments
Labels

Comments

@un9nplayer
Copy link

Vulnerable Oracel Database login path : /OA_HTML/AppsLocalLogin.jsp

1

Vulnerable Create User Path : /OA_HTML/ibeCAcpSSOReg.jsp
an attacker can create a new user and get access to the database as a low user which is supposed not to be happening.

2

after that Attackers can take full access and leak mass user data publicly.

3

so, please add both paths in seclist in discovery for web-find.

@un9nplayer un9nplayer changed the title Unpublicly Paths add that leads to Mass Account Takeover And Sql please add this Unpublicly Paths in seclist that can leads to Mass Account Takeover And Sql on Oracle E-Business. Jul 1, 2022
@g0tmi1k
Copy link
Collaborator

g0tmi1k commented Aug 2, 2022

Feel free to make a pull request

@ItsIgnacioPortal
Copy link
Contributor

Feel free to make a pull request

I suspect that they made this issue because of the size of this repo; Some people don't want to have to clone 1.6GBs to be able to contribute :p

@x0rld
Copy link

x0rld commented Aug 16, 2022

Feel free to make a pull request

I suspect that they made this issue because of the size of this repo; Some people don't want to have to clone 1.6GBs to be able to contribute :p

well now you can do directly on github without cloning it

@stampyzfanz
Copy link

stampyzfanz commented Aug 18, 2022

Also, try pressing the period key on a repository's homepage to use a web version of VS Code that contains the repository's content. You can also pr directly from its view.

Repository owner deleted a comment from sumayanavha Nov 23, 2023
@g0tmi1k
Copy link
Collaborator

g0tmi1k commented Nov 24, 2023

Done (thanks to @molangning )

@g0tmi1k g0tmi1k closed this as completed Nov 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

5 participants