{"id":"71785f08-674c-4aeb-9214-9f1e55e800a3","engagementId":"cbaa5ae2-c186-46f9-9cd3-9b0ab819f046","data":{"brief":{"id":"8eef3b0e-91f8-4703-8dd8-76c25c1f3b98","name":"Cengage VDP","tagline":"Cengage Vulnerability Disclosure Program","description":"\u003cp\u003eCengage Group is one of the largest education technology companies in the world. From kindergarten through college, adult continuing education, and English as a Second Language, we are focused on providing quality digital products and services to millions of students around the world. Whatever walk of life, whatever stage in their career or lives our students are at, we are committed to our students’ advancement and education. Through our Vulnerability Disclosure Program, you can help us ensure our students continued success by helping us secure their future. We look forward to working with the security community to find vulnerabilities in order to keep our businesses and customers safe. Good luck, and happy hunting! \u003c/p\u003e\n\n\u003ch2\u003eRatings\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"46b8dcc8-bbd9-4a60-80ab-ab088c2bc3e4","targetsOverview":"\u003ch2\u003eProgram Testing\u003c/h2\u003e\n\n\u003cp\u003ePlease do the following when participating in Cengage's Vulnerability Disclosure Program to help our teams identify your testing traffic against our normal data and the malicious actors out in the world. We appreciate your hard work and encourage your participation. In following these Program Rules, we can all work as a team to identify vulnerabilities and grow together to provide a more safe and secure experience for our students and teachers:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eTo gain access to the application, please sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://researcherdocs.bugcrowd.com/v2.0/docs/your-bugcrowdninja-email-address\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e. \u003c/li\u003e\n\u003cli\u003eReport to us the header which includes your @bugcrowdninja.com email so we can easily identify it. Burp and other proxies allow the easy automatic addition of headers to all outbound requests.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eIdentifier\u003c/th\u003e\n\u003cth\u003eFormat\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eYour bugcrowdninja.com Email\u003c/td\u003e\n\u003ctd\u003eX-Vulnerability-Disclosure:[username]@bugcrowdninja.com\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\n\u003ch3\u003eNote\u003c/h3\u003e\n\n\u003cp\u003eCengage already runs automated scans from Acunetix, Zap, Nessus, et al., against the in-scope targets – so using these tools is likely of minimal utility to researchers. As such, please avoid using them unless for targeted, specific testing, and then only at less than six requests per second. Custom scripts and fuzzing tools are still permitted but if using them, \u003cstrong\u003eplease abide by the same guideline in keeping your traffic to six requests per second or less\u003c/strong\u003e.  \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eProgram Rules\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003ePlease provide detailed reports with reproducible steps. We will inquire more details if the steps to reproduce need more context. \u003c/li\u003e\n\u003cli\u003eSubmit one vulnerability per report, unless you need to chain vulnerabilities to provide impact.\u003c/li\u003e\n\u003cli\u003eWhen duplicates occur, we only triage the first report that was received (provided that it can be fully reproduced).\u003c/li\u003e\n\u003cli\u003eMultiple vulnerabilities caused by one underlying issue will be treated as one valid report.\u003c/li\u003e\n\u003cli\u003ePlease refrain from utilizing any of the following as it interrupts daily work activities for employees: Disruption of service (DoS), brute force attacks, and Social engineering (e.g. phishing, vishing, smishing)\u003c/li\u003e\n\u003cli\u003eMake a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with explicit permission of the account holder.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eProgram Restrictions\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eSecurity vulnerabilities in third-party products or websites that are not under Cengage’s direct control may not be accepted.\u003c/li\u003e\n\u003cli\u003eWhile testing please use your bugcrowdninja.com email.\u003c/li\u003e\n\u003cli\u003eWhile running any scans append your bugcrowdninja.com email as an additional header in your requests.\u003c/li\u003e\n\u003cli\u003eLimit account creation to 2 accounts total for any testing.\u003c/li\u003e\n\u003cli\u003ePlease restrict the amount of requests to a maximum of 20 per minute.\u003c/li\u003e\n\u003cli\u003eStored XSS: While testing for S-XSS on posts/forms please be aware that these systems are production and visible by normal users. Please delete your PoC as soon as you have validated your finding and submitting your report. Additionally, for the alert payload please use the following language \"This is only a test\".\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support \u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"0c875a6e-7434-486f-9a8c-224fb2463933","name":"In Scope Targets","targets":[{"id":"69812c35-ce65-47ff-af0c-64472c3a40c2","uri":"","name":"https://*.cengage.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c08d0fe0-ab64-4731-9206-003e00270c88","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"69812c35-ce65-47ff-af0c-64472c3a40c2"},{"id":"624f911d-7e8c-4d56-b523-e7416c1cc319","name":"NextJS","targetId":"69812c35-ce65-47ff-af0c-64472c3a40c2"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"69812c35-ce65-47ff-af0c-64472c3a40c2"},{"id":"c392035e-469e-4625-a2f9-bbf1ffb873d9","name":"Spring","targetId":"69812c35-ce65-47ff-af0c-64472c3a40c2"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"69812c35-ce65-47ff-af0c-64472c3a40c2"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"69812c35-ce65-47ff-af0c-64472c3a40c2"}],"recentChangeFlags":null},{"id":"366e34e0-b6d9-4ade-b8cf-746acbb84cff","uri":"","name":"https://*.cengagebrain.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6e131ae7-39c7-41df-a4ef-df468e7b8aa8","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"366e34e0-b6d9-4ade-b8cf-746acbb84cff"},{"id":"624f911d-7e8c-4d56-b523-e7416c1cc319","name":"NextJS","targetId":"366e34e0-b6d9-4ade-b8cf-746acbb84cff"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"366e34e0-b6d9-4ade-b8cf-746acbb84cff"},{"id":"c392035e-469e-4625-a2f9-bbf1ffb873d9","name":"Spring","targetId":"366e34e0-b6d9-4ade-b8cf-746acbb84cff"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"366e34e0-b6d9-4ade-b8cf-746acbb84cff"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"366e34e0-b6d9-4ade-b8cf-746acbb84cff"}],"recentChangeFlags":null},{"id":"1ded5d16-af84-4b80-9db1-54080bcba30b","uri":"","name":"https://*.cengagework.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"28ec1af7-852e-499f-899a-86aa55d56aa4","sortOrder":0},"sortOrder":0,"tags":[{"id":"21bf0b21-e645-4730-b030-be773c64efc7","name":"Gatsby","targetId":"1ded5d16-af84-4b80-9db1-54080bcba30b"},{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"1ded5d16-af84-4b80-9db1-54080bcba30b"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"1ded5d16-af84-4b80-9db1-54080bcba30b"}],"recentChangeFlags":null},{"id":"ef1a631e-03a8-4273-82a0-320822bde0bb","uri":"","name":"https://*.ed2go.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4e2c53b0-4523-498b-b430-59cb1bb38436","sortOrder":0},"sortOrder":0,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"ef1a631e-03a8-4273-82a0-320822bde0bb"},{"id":"9ffd297c-4781-4777-94cf-ef4e2ddda266","name":"C#","targetId":"ef1a631e-03a8-4273-82a0-320822bde0bb"},{"id":"a6965c24-bc5c-4399-bc66-6fb6c9e3b0e1","name":"Microsoft SQL Server","targetId":"ef1a631e-03a8-4273-82a0-320822bde0bb"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"ef1a631e-03a8-4273-82a0-320822bde0bb"}],"recentChangeFlags":null},{"id":"e1b43395-59e0-49fe-aa52-82380666e3a2","uri":"","name":"https://*.milady.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"76759869-3e83-40ab-ae75-2dbf8bf92e34","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"e1b43395-59e0-49fe-aa52-82380666e3a2"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"e1b43395-59e0-49fe-aa52-82380666e3a2"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"e1b43395-59e0-49fe-aa52-82380666e3a2"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"e1b43395-59e0-49fe-aa52-82380666e3a2"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"e1b43395-59e0-49fe-aa52-82380666e3a2"}],"recentChangeFlags":null},{"id":"c1bf52d2-ed1c-469a-bc7d-064b6bc6e123","uri":"","name":"https://*.gale.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0f441aaf-9510-454e-9c99-a4616357a30e","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"c1bf52d2-ed1c-469a-bc7d-064b6bc6e123"},{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"c1bf52d2-ed1c-469a-bc7d-064b6bc6e123"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"c1bf52d2-ed1c-469a-bc7d-064b6bc6e123"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"c1bf52d2-ed1c-469a-bc7d-064b6bc6e123"}],"recentChangeFlags":null},{"id":"3cced02f-88e4-4a73-9236-ccc2ea583d50","uri":"","name":"https://*.infosec-skills.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"723e3dde-1352-433d-8053-b8438dd25f68","sortOrder":0},"sortOrder":0,"tags":[{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"3cced02f-88e4-4a73-9236-ccc2ea583d50"},{"id":"99bf10d6-2a86-4993-826a-dbf3a956aefa","name":"Redis","targetId":"3cced02f-88e4-4a73-9236-ccc2ea583d50"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"3cced02f-88e4-4a73-9236-ccc2ea583d50"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"3cced02f-88e4-4a73-9236-ccc2ea583d50"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"3cced02f-88e4-4a73-9236-ccc2ea583d50"}],"recentChangeFlags":null},{"id":"2d7526ec-c7af-4c68-80da-089a18ebe5f5","uri":"","name":"https://*.infosec-iq.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"66655104-0ed6-4f52-a129-3e56634c0632","sortOrder":0},"sortOrder":0,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"2d7526ec-c7af-4c68-80da-089a18ebe5f5"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"2d7526ec-c7af-4c68-80da-089a18ebe5f5"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"2d7526ec-c7af-4c68-80da-089a18ebe5f5"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"2d7526ec-c7af-4c68-80da-089a18ebe5f5"}],"recentChangeFlags":null},{"id":"c0fdbc52-1f2b-4739-b010-61a21ae84f3b","uri":"","name":"https://*.infosecinstitute.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"173a0ab2-f9e8-4d27-802a-a0d87ef771aa","sortOrder":0},"sortOrder":0,"tags":[{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"c0fdbc52-1f2b-4739-b010-61a21ae84f3b"},{"id":"9ffd297c-4781-4777-94cf-ef4e2ddda266","name":"C#","targetId":"c0fdbc52-1f2b-4739-b010-61a21ae84f3b"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"c0fdbc52-1f2b-4739-b010-61a21ae84f3b"}],"recentChangeFlags":null},{"id":"3fbc7165-f622-4071-8f25-3ffe9efcccbc","uri":"http://starship-emulator.cengage.com/","name":"http://starship-emulator.cengage.com/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"366e3a79-169e-411b-a2c5-dfcd942e7126","sortOrder":9},"sortOrder":9,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"3fbc7165-f622-4071-8f25-3ffe9efcccbc"}],"recentChangeFlags":null},{"id":"baf77326-b841-4235-81dc-8448e804ad8a","uri":"https://a2s.cengage.com/","name":"https://a2s.cengage.com/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4e3d29ff-a641-4b42-932b-a2f09d75b5f0","sortOrder":10},"sortOrder":10,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"baf77326-b841-4235-81dc-8448e804ad8a"},{"id":"e82bba17-848b-4f2b-a2a5-58d2a83530d4","name":"Kubernetes","targetId":"baf77326-b841-4235-81dc-8448e804ad8a"}],"recentChangeFlags":null},{"id":"f5a25aec-13c4-4a40-8b6e-30814c89a98b","uri":"https://websuite.visiblebody.com","name":"https://websuite.visiblebody.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"82a9f82f-9df1-4e88-bde2-c3ab6a77eff3","sortOrder":11},"sortOrder":11,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"f5a25aec-13c4-4a40-8b6e-30814c89a98b"},{"id":"4e9d5c53-3b04-4bca-ba30-e8e33d87019a","name":"Ruby on Rails","targetId":"f5a25aec-13c4-4a40-8b6e-30814c89a98b"},{"id":"dd477d24-b394-460d-aaf7-9bd213555968","name":"Ruby","targetId":"f5a25aec-13c4-4a40-8b6e-30814c89a98b"}],"recentChangeFlags":null},{"id":"cfb5de09-af1e-4c66-9fe2-59e36ba95596","uri":"https://www.visiblebody.com","name":"https://www.visiblebody.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f0cf4a47-9fab-4cc2-afab-b3e1ea9efe2a","sortOrder":12},"sortOrder":12,"tags":[{"id":"40ac7f57-395c-4f6a-82fb-292f80ab0240","name":"HTML","targetId":"cfb5de09-af1e-4c66-9fe2-59e36ba95596"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"cfb5de09-af1e-4c66-9fe2-59e36ba95596"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"cfb5de09-af1e-4c66-9fe2-59e36ba95596"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003ch2\u003eTarget Information\u003c/h2\u003e\n\n\u003cp\u003eAny Cengage asset is considered as in scope for this program. \u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"02e8f365-1853-451b-acdb-6a4d2a804218","name":"Australia In Scope Targets","targets":[{"id":"cb2b3e14-5a53-451d-8c8f-501b32543a4a","uri":"https://www.pmguidedreading.com","name":"https://www.pmguidedreading.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a48f9084-eeeb-47b0-befa-9d849f219b79","sortOrder":0},"sortOrder":0,"tags":[{"id":"005d6fd9-5c1a-45f7-a2b6-af0e2fdfd820","name":"Laravel","targetId":"cb2b3e14-5a53-451d-8c8f-501b32543a4a"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"cb2b3e14-5a53-451d-8c8f-501b32543a4a"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"cb2b3e14-5a53-451d-8c8f-501b32543a4a"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"cb2b3e14-5a53-451d-8c8f-501b32543a4a"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"cb2b3e14-5a53-451d-8c8f-501b32543a4a"},{"id":"ce8ff3cd-4d54-4404-8321-6351781551a3","name":"Vue.js","targetId":"cb2b3e14-5a53-451d-8c8f-501b32543a4a"}],"recentChangeFlags":null},{"id":"f220f81b-5fc2-4610-9520-ab2399338ea3","uri":"","name":"https://*.cengage.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"92bf4549-ecb9-4b90-a281-6a700b28d680","sortOrder":0},"sortOrder":0,"tags":[{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"f220f81b-5fc2-4610-9520-ab2399338ea3"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"f220f81b-5fc2-4610-9520-ab2399338ea3"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"f220f81b-5fc2-4610-9520-ab2399338ea3"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"f220f81b-5fc2-4610-9520-ab2399338ea3"}],"recentChangeFlags":null},{"id":"62d5bdbe-9f75-49f2-82cc-5abe57cbf88d","uri":"","name":"https://*.cengage.co.nz ","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f609f284-65a4-4891-8d51-7b016b7ad5d5","sortOrder":0},"sortOrder":0,"tags":[{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"62d5bdbe-9f75-49f2-82cc-5abe57cbf88d"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"62d5bdbe-9f75-49f2-82cc-5abe57cbf88d"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"62d5bdbe-9f75-49f2-82cc-5abe57cbf88d"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"62d5bdbe-9f75-49f2-82cc-5abe57cbf88d"}],"recentChangeFlags":null},{"id":"4bbf7b9f-c388-4ca6-8253-3d0bb9385c73","uri":"https://gotit.net.au/dosage-calculations","name":"https://gotit.net.au/dosage-calculations","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3e14a4ca-d816-40ef-85ad-9c1e399647d2","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"4bbf7b9f-c388-4ca6-8253-3d0bb9385c73"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"4bbf7b9f-c388-4ca6-8253-3d0bb9385c73"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"4bbf7b9f-c388-4ca6-8253-3d0bb9385c73"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"4bbf7b9f-c388-4ca6-8253-3d0bb9385c73"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"4bbf7b9f-c388-4ca6-8253-3d0bb9385c73"}],"recentChangeFlags":null},{"id":"2517cb80-4f7f-413a-93fc-60b975fb81c6","uri":"","name":"https://*.nelsonnet.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"17a2f44b-51ec-4682-9e81-eecb598dc81a","sortOrder":0},"sortOrder":0,"tags":[{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"2517cb80-4f7f-413a-93fc-60b975fb81c6"},{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"2517cb80-4f7f-413a-93fc-60b975fb81c6"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"2517cb80-4f7f-413a-93fc-60b975fb81c6"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"2517cb80-4f7f-413a-93fc-60b975fb81c6"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"2517cb80-4f7f-413a-93fc-60b975fb81c6"}],"recentChangeFlags":null},{"id":"6f7bd081-bf85-4fce-af61-e558154258b4","uri":"","name":"https://*.pmecollection.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9e606205-11db-40bf-b6d9-c91f3742a777","sortOrder":0},"sortOrder":0,"tags":[{"id":"40ac7f57-395c-4f6a-82fb-292f80ab0240","name":"HTML","targetId":"6f7bd081-bf85-4fce-af61-e558154258b4"},{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"6f7bd081-bf85-4fce-af61-e558154258b4"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"6f7bd081-bf85-4fce-af61-e558154258b4"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"6f7bd081-bf85-4fce-af61-e558154258b4"}],"recentChangeFlags":null},{"id":"8507c2ff-c94c-4780-83f5-70df9756ab29","uri":"","name":"https://*.iqcentral.cengage.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"69c1e96d-bc8a-4342-bfef-15c538566c2c","sortOrder":0},"sortOrder":0,"tags":[{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"8507c2ff-c94c-4780-83f5-70df9756ab29"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"8507c2ff-c94c-4780-83f5-70df9756ab29"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"8507c2ff-c94c-4780-83f5-70df9756ab29"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"8507c2ff-c94c-4780-83f5-70df9756ab29"}],"recentChangeFlags":null},{"id":"cb86dc5d-1ec0-45ea-8c60-71dd60fd2ee8","uri":"https://pmolcards.com","name":"https://pmolcards.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2ad5e2c6-9b34-4103-9434-e3f59ddf07cf","sortOrder":0},"sortOrder":0,"tags":[{"id":"73ea470f-6fb9-4636-900b-259e5466f37e","name":"Apache httpd","targetId":"cb86dc5d-1ec0-45ea-8c60-71dd60fd2ee8"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"cb86dc5d-1ec0-45ea-8c60-71dd60fd2ee8"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"cb86dc5d-1ec0-45ea-8c60-71dd60fd2ee8"}],"recentChangeFlags":null},{"id":"95715821-25f8-4a0d-b28a-aec422dff56a","uri":"https://*.nldcomprehension.com","name":"https://nldcomprehension.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1df2d4f1-b828-400e-ad51-596d1b3042d1","sortOrder":0},"sortOrder":0,"tags":[{"id":"73ea470f-6fb9-4636-900b-259e5466f37e","name":"Apache httpd","targetId":"95715821-25f8-4a0d-b28a-aec422dff56a"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"95715821-25f8-4a0d-b28a-aec422dff56a"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"95715821-25f8-4a0d-b28a-aec422dff56a"}],"recentChangeFlags":null},{"id":"87d987a5-234b-44b3-983d-28e0c509257a","uri":"","name":"https://*.nelsonhub.cengagelearning.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7ebc3d55-9357-4194-a76d-e5865caa95e4","sortOrder":0},"sortOrder":0,"tags":[{"id":"40ac7f57-395c-4f6a-82fb-292f80ab0240","name":"HTML","targetId":"87d987a5-234b-44b3-983d-28e0c509257a"},{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"87d987a5-234b-44b3-983d-28e0c509257a"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"87d987a5-234b-44b3-983d-28e0c509257a"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"87d987a5-234b-44b3-983d-28e0c509257a"}],"recentChangeFlags":null},{"id":"025a83ed-b82b-4299-b9b6-ed2149a0011f","uri":"","name":"https://*.cengagelearning.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e9322b20-63d2-4044-a39d-e16583544def","sortOrder":0},"sortOrder":0,"tags":[{"id":"40ac7f57-395c-4f6a-82fb-292f80ab0240","name":"HTML","targetId":"025a83ed-b82b-4299-b9b6-ed2149a0011f"},{"id":"70f8fc74-f147-45d5-8f56-9bff2f555bd7","name":".NET","targetId":"025a83ed-b82b-4299-b9b6-ed2149a0011f"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"025a83ed-b82b-4299-b9b6-ed2149a0011f"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"025a83ed-b82b-4299-b9b6-ed2149a0011f"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003e\u003cstrong\u003eCengage Australia\u003c/strong\u003e\u003cbr\u003e\nCengage is the education and technology company built for learners. Confident students are successful learners, so we design tools that keep them moving toward their goals.\u003cbr\u003e\nWe develop transformational, cutting-edge teaching and learning tools that promote analysis, evaluation, synthesis and application.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eLeading content creator\u003c/li\u003e\n\u003cli\u003eNumber one higher education publisher in Australia\u003c/li\u003e\n\u003cli\u003eResearch content use in 100% of university libraries in Australia and New Zealand\u003c/li\u003e\n\u003cli\u003eDedicated and specialised sales force with representatives in every major city in Australia and New Zealand\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eNelson Primary\u003c/strong\u003e\u003cbr\u003e\ndevelops award-winning and pedagogically sound literacy and numeracy resources for Foundation to Year 6. Our highly respected PM series is recognised globally and teaches students to become effective readers, writers and speakers.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eNelson Secondary\u003c/strong\u003e\u003cbr\u003e\npublishes award-winning textbooks, teacher resources and digital materials designed to meet the curriculum requirements of the State and Federal Governments in Australia and New Zealand for all years of secondary education.\u0026quot;\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"16c94956-b419-443e-a210-2cc03a969af1","name":"Cengage Asia - In Scope Targets","targets":[{"id":"76ad0af0-ab09-423e-8576-e6484a8a6040","uri":"","name":"https://*.cengageasia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d51958ce-bf08-4e06-b4b8-82a0cde7ec72","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"76ad0af0-ab09-423e-8576-e6484a8a6040"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"76ad0af0-ab09-423e-8576-e6484a8a6040"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"76ad0af0-ab09-423e-8576-e6484a8a6040"}],"recentChangeFlags":null},{"id":"01ad77e7-4cce-4ae4-927b-8e7f07e0152b","uri":"https://www.asianglshop.com","name":"https://www.asianglshop.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f5780345-df28-4512-a2e3-3c139f4c4d11","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"01ad77e7-4cce-4ae4-927b-8e7f07e0152b"},{"id":"3585ef4a-cd09-429b-ad25-5777064e59c5","name":"Moment.js","targetId":"01ad77e7-4cce-4ae4-927b-8e7f07e0152b"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"01ad77e7-4cce-4ae4-927b-8e7f07e0152b"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"01ad77e7-4cce-4ae4-927b-8e7f07e0152b"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"01ad77e7-4cce-4ae4-927b-8e7f07e0152b"}],"recentChangeFlags":null},{"id":"11151386-1f40-414c-ad7a-bcaaade0a12d","uri":"https://www.cengageasiaestore.com","name":"https://www.cengageasiaestore.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7a43a87c-912d-4559-9ed6-fc3754412c43","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"11151386-1f40-414c-ad7a-bcaaade0a12d"},{"id":"3585ef4a-cd09-429b-ad25-5777064e59c5","name":"Moment.js","targetId":"11151386-1f40-414c-ad7a-bcaaade0a12d"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"11151386-1f40-414c-ad7a-bcaaade0a12d"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"11151386-1f40-414c-ad7a-bcaaade0a12d"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"11151386-1f40-414c-ad7a-bcaaade0a12d"}],"recentChangeFlags":null},{"id":"0254b736-ce07-4574-be0f-2d26577af37c","uri":"","name":"https://*.cengageresource.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b2d3a2f8-642e-4239-b599-88f0ab6f1ee6","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"0254b736-ce07-4574-be0f-2d26577af37c"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"0254b736-ce07-4574-be0f-2d26577af37c"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"0254b736-ce07-4574-be0f-2d26577af37c"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"0254b736-ce07-4574-be0f-2d26577af37c"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003e\u003cstrong\u003eCengage Learning Asia\u003c/strong\u003e\u003c/p\u003e\n\n\u003cp\u003eCengage is the education and technology company built for learners. The company serves the higher education, K-12, professional, library and workforce training markets worldwide. Cengage creates learning experiences that build confidence and momentum toward the future students want. The company is headquartered in Boston, MA with an office hub in San Francisco. Employees reside in nearly 40 countries with sales in more than 125 countries around the world.\u003c/p\u003e\n\n\u003cp\u003eCengage Learning Asia with it’s regional headquarters in Singapore, comprises 11 territories and offices which include China, Hong Kong, Indonesia, Japan, Korea, Malaysia, Philippines, Taiwan, Thailand and Vietnam.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"e7d9e4df-2772-47c1-b38d-52ec4cb5ec0c","name":"Out of Scope Targets","targets":[{"id":"638972a1-bcdf-4d48-b0e0-c72be6886150","uri":"","name":"https://www.gale.com/public/small-library-support-program/form","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ed622d75-61b2-4bbc-94ef-9f0c1ecfc3bc","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e4bba8cd-d79d-4f4f-9019-7b6c39897ba4","uri":"","name":"https://www.gale.com/primary-sources/digital-humanities-webinar","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e31ce579-547f-4ccb-8eec-6746c94468e3","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"a9d9719a-dd7d-402e-8cca-6efe6e0e2b42","uri":"","name":"https://www.gale.com/primary-sources/need-to-know/trial-request","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1036da14-867c-4380-8e28-fd4355b9c5ea","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"92eaaccc-9ff6-4ca5-911f-ec3bdb6d0aaa","uri":"","name":"https://www.gale.com/databases/gale-analytics","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"44dac8d3-dc38-45d6-a8f0-f44ab3ae4c1b","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"67046f49-6192-4dd0-821e-ae9bc09b79f2","uri":"","name":"https://www.cengagework.com/about_us/#contact","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6a25890b-fac8-47d7-9424-21bde7492539","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":3,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"cbaa5ae2-c186-46f9-9cd3-9b0ab819f046","code":"cengage-vdp","state":"in_progress","endsAt":null,"bountyId":"5c0e9d1e-e7a2-46c5-b6b0-af424fe4aa8d","startsAt":"2021-02-16T19:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Technology","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/667f/6511/7d6cf21a/5583c71af8cc5f24888c98ecb91b2997_cengage-squarelogo.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2021-02-16T19:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/cengage-vdp","changelogs":"/engagements/cengage-vdp/changelog","submissions":null,"announcements":"/engagements/cengage-vdp/announcements","hallOfFame":"/engagements/cengage-vdp/hall_of_fames","crowdstream":"/engagements/cengage-vdp/crowdstream"},"announcementsCount":43,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/cengage-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=cengage-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/cengage-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/cengage-vdp/changelog","publishedAt":"2026-05-07T19:06:30.145Z","engagementChangelogUrl":"/engagements/cengage-vdp/changelog/71785f08-674c-4aeb-9214-9f1e55e800a3","createUserFeedbacksUrl":"/engagements/cengage-vdp/feedbacks","engagementCrowdstreamUrl":"/engagements/cengage-vdp/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}