Search results

It is possible to upload a phtml file to the assets/sources/uploads directory

⛔important

⛔vulnerabilities

✍source code

Status: Open.

#19 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

[CVE-2021-41694] Weak password recovery function

⛔vulnerabilities

Status: Open.

#18 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

[CVE-2021-41696] IDOR vulnerability in the password change procedure allows changing a password of any user

⛔vulnerabilities

Status: Open.

#17 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

[CVE-2021-41695] SQL injection in connect.php + blocklist bypass

⛔vulnerabilities

Status: Open.

#16 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

GDRP for mobile version

🖥interface

Status: Open.

#15 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

No confirmation sent to mailbox when registering on mobile version (email activation required)

✍source code

❔to check

📱mobile version

🧩 functions / api

Status: Open.

#14 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

Gifts or gifs sent from mobile version do not display on Web version

❔to check

📱mobile version

🖥interface

🖥️web version

🦗bug

Status: Open.

#13 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

Users can buy access to their own stories

✍source code

❔to check

🖥interface

🦗bug

Status: Open.

#12 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

Scrolling problems on iOS

❔to check

📱mobile version

🦗bug

Status: Open.

#11 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

SEO checklist for PWA

✍source code

📱mobile version

Status: Open.

#10 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

User “0” anomaly

❔to check

📱mobile version

Status: Open.

#9 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0

Fixes Web App Manifest, Manifest.json

📱mobile version

🧩 functions / api

Status: Open.

#8 In Sh4d0v/belloo-x;

· Sh4d0v opened on Sep 16, 2024

 ·  

Belloo-X 1.0