226245.txt

ReportLink:https://hackerone.com/reports/226245
WeaknessName:Code Injection
Reporter:https://hackerone.com/joaomatosf
ReportedTo:U.S. Dept Of Defense(deptofdefense)
BountyAmount:
Severity:critical
State:Closed
DateOfDisclosure:05.07.2017 20:51:34

Summary:
A remote code execution (RCE) vulnerability was found on a DoD website which could have enabled an attacker to execute remote commands on the web server. Thank you @joaomatosf for notifying us of this vulnerability!