sub domains hosted on smartjobboard.com or mysmartjobboard.com are also possible to be claimed

Question

sub domains hosted on smartjobboard.com or mysmartjobboard.com are also possible to be claimed

GDATTACKER-RESEARCHER opened this issue 4 years ago · comments

@gdattacker commented 4 years ago

Service name

smartjobboard.com
mysmartjobboard.com

Proof

go to smartjobboard.com

create a trial account.

settings>System Settings>add your vulnerable domain in column "Custom Domain Name"

Documentation

https://help.smartjobboard.com/en/articles/1269655-connecting-a-custom-domain-name

proabiral · Answer 1 · Thu Apr 02 2020 19:01:23 GMT+0800 (China Standard Time)

Just confirmed that this works 👍
Thanks for sharing.

@gdattacker · Answer 2 · Thu Apr 02 2020 19:20:53 GMT+0800 (China Standard Time)

Why not you guys updating the list with other vulnerable hosts.

…

On Thu, Apr 2, 2020, 4:31 PM proabiral ***@***.***> wrote: Just confirmed that this works 👍 Thanks for sharing. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#139 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AI56B7FTP54ENJSZWZL2MKLRKRWBFANCNFSM4L2CKC3Q> .

@gdattacker · Answer 3 · Sat Apr 04 2020 00:27:04 GMT+0800 (China Standard Time)

Pingdom.com also vulnerable. https://youtu.be/VuIO1l5RL8k

Jonathan Leitschuh · Answer 4 · Sat Apr 04 2020 04:53:06 GMT+0800 (China Standard Time)

Why not you guys updating the list with other vulnerable hosts.

Feel free to create a PR with a link to this issue. That's part of how contributing to this repository works.

Michael Skelton · Answer 5 · Tue Apr 07 2020 06:17:04 GMT+0800 (China Standard Time)

As @JLLeitschuh mentioned, please do raise a pull request. @EdOverflow and I are happy to maintain this, but there's a limit to the time that can be invested given the vast number of other projects we both work on.