Vulnerability Report Submission Template
Vulnerability 1 Name: No HTTPS / Insecure HTTP Connection
Explanation:
The website is accessible over plain http:// instead of enforcing secure
https://. This exposes user data to man-in-the-middle (MITM) attacks and
eavesdropping.
Location / Page Reference:
Entire site — Accessible via http://example.com
Working Payload / Proof of Concept:
Open the site in the browser using:
http://securebank.com → It loads without redirecting to https://.
Explanation of Exploitation Method:
If users log in or enter any sensitive data over HTTP, attackers on the same
network can intercept the traffic. This makes it easy to steal login credentials or
session cookies.
(The website does not have this vulnerability. This is just an example)
Marking Scheme
● Easy Errors: 50 points each
● Medium Errors: 100 points each
● Hard Errors: 200 points each
Points are awarded at the discretion of the organising committee.