Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
1 in-scope
github.com/phpbb/phpbbsource_code· criticalwww.phpbb.comurlfirst indexed
92d ago · 1 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for phpBB.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/phpbb",
"name": "phpBB",
"handle": "phpbb",
"targets": {
"in_scope": [
{
"asset_type": "SOURCE_CODE",
"instruction": "The Admin Control Panel allows adminstrators to create custom BBcodes. This feature also allows the use of JavaScript, therefore XSS created by an adminstrator is out of scope.",
"max_severity": "critical",
"asset_identifier": "https://github.com/phpbb/phpbb",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": "Please limit your reports to the phpBB git repository for now.",
"max_severity": "none",
"asset_identifier": "www.phpbb.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
]
},
"website": "https://www.phpbb.com",
"offers_swag": false,
"managed_program": false,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 67,
"average_time_to_report_resolved": 1366,
"average_time_to_first_program_response": 92
}