OpenStack Security in openstack-security-advisories

[85ufukkara85]

Contact
--------------
mail: <email address hidden>
mail: <email address hidden>
--------------
En;
report explanation

Since encryption and passwords are very simple on your site, the administrator knows full access to the panel and provides comments, deletions, adding pages, adding text and logging in to administrator authorized accounts.

hacking trial

https://archive.is/hfvih 27 Feb 2020 20:21:08 UTC

please review your security passwords

If the question is confirmed clearly, can I get a reward?

---------------
Tr;
Rapor açıklaması

sitenizde şifrelemeler ve şifreler çok basit olduğu için admin panele tam erişim sağlana biliyor ve bu şekilde yorum ekleme silme sayfa ekleme yazı ekleme gibi şeyler yapıla biliyor kısaca admin yetkili hesaplarına girilip işlem yapıla biliyor

hack denemesi

https://archive.is/hfvih 27 Feb 2020 20:21:08 UTC

lütfen güvenlik şifrelerinizi inceleyin

Açık doğrularırsa ödül alabilirmiyim

[Jimmy McArthur (jimmy-l)]

Hi - I appreciate the bug report. We're looking into the issue and will take the appropriate security response. We are a non-profit and as such, we don't offer bug bounties. Again though, thank you for alerting us to the issue.

[Jimmy McArthur (jimmy-l)]

We have secured the admin user for WP and also done a sweep of additional users to generate new passwords.