{"id":"5d8af978-978d-4a0a-87d5-2ae0ab0dc2af","engagementId":"f56f4fde-9e53-49f8-a6f3-adb1aaff40e9","data":{"brief":{"id":"8f2db7b7-b651-49e7-9ea7-175be9ea1bc4","name":"Internet Brands Public","tagline":"Internet Brands is an online media and technology company that serves businesses and consumers in four major categories: Automotive, Health, Legal, and Home/Travel.","description":"\u003cp\u003eNo technology is perfect, and Internet Brands believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our applications. Good luck and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"46b8dcc8-bbd9-4a60-80ab-ab088c2bc3e4","targetsOverview":"\u003cp\u003e\u003cem\u003eAny domain/property of Internet Brands not listed in the targets section may not be eligible for payout. All domains/properties of Internet Brands listed as Out of Scope will not be rewarded. If you happen to identify a security vulnerability on a target that is not expressly identified either in scope or out of scope, but demonstrably belongs to Internet Brands, please report it here for consideration. However, be aware that there is no guarantee of rewards or points-based compensation for any properties not expressly identified as in scope.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eShared Code Base\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eSubmissions on a domain where a fix would resolve subsequent and similar issues across different domains will be closed as a duplicate finding, and only the first valid submission will be eligible for reward.\u003c/li\u003e\n\u003cli\u003eSimilarly, if there is a single fix upstream which then deploys to multiple subdomains, then the first first submission will be eligible for reward and subsequent findings would be considered duplicates.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess\u003c/h2\u003e\n\n\u003cp\u003eAll targets are publicly accessible and do not require any additional steps to access. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eAccess to the Database\u003c/li\u003e\n\u003cli\u003eRights escalations\u003c/li\u003e\n\u003cli\u003eAbility to manipulate data\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eExcluded Vulnerability Types\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eDescriptive error messages (e.g. Stack Traces, application or server errors).\u003c/li\u003e\n\u003cli\u003eHTTP 404 codes/pages or other HTTP non-200 codes/pages.\u003c/li\u003e\n\u003cli\u003eFingerprinting / banner disclosure on common/public services.\u003c/li\u003e\n\u003cli\u003eDisclosure of known public files or directories, (e.g. robots.txt).\u003c/li\u003e\n\u003cli\u003eClickjacking and issues only exploitable through clickjacking.\u003c/li\u003e\n\u003cli\u003eCSRF on forms that are available to anonymous users (e.g. the contact form).\u003c/li\u003e\n\u003cli\u003eLogout Cross-Site Request Forgery (logout CSRF).\u003c/li\u003e\n\u003cli\u003ePresence of application or web browser ‘autocomplete’ or ‘save password’ functionality.\u003c/li\u003e\n\u003cli\u003eLack of Secure/HTTPOnly flags on non-sensitive Cookies.\u003c/li\u003e\n\u003cli\u003eLack of Security Speedbump when leaving the site.\u003c/li\u003e\n\u003cli\u003eWeak Captcha / Captcha Bypass\u003c/li\u003e\n\u003cli\u003eLogin or Forgot Password page brute force and account lockout not enforced.\u003c/li\u003e\n\u003cli\u003eOPTIONS HTTP method enabled\u003c/li\u003e\n\u003cli\u003eUsername / email enumeration\u003c/li\u003e\n\u003cli\u003evia Login Page error message\u003c/li\u003e\n\u003cli\u003evia Forgot Password error message\u003c/li\u003e\n\u003cli\u003eMissing HTTP security headers, specifically (https://www.owasp.org/index.php/List_of_useful_HTTP_headers), e.g.\n\n\u003cul\u003e\n\u003cli\u003eStrict-Transport-Security\u003c/li\u003e\n\u003cli\u003eX-Frame-Options\u003c/li\u003e\n\u003cli\u003eX-XSS-Protection\u003c/li\u003e\n\u003cli\u003eX-Content-Type-Options\u003c/li\u003e\n\u003cli\u003eContent-Security-Policy, X-Content-Security-Policy, X-WebKit-CSP\u003c/li\u003e\n\u003cli\u003eContent-Security-Policy-Report-Only\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eSSL Issues, e.g.\u003c/li\u003e\n\u003cli\u003eSSL Attacks such as BEAST, BREACH, Renegotiation attack\u003c/li\u003e\n\u003cli\u003eSSL Forward secrecy not enabled\u003c/li\u003e\n\u003cli\u003eSSL weak / insecure cipher suites\u003c/li\u003e\n\u003cli\u003eLocal File Inclusion\u003c/li\u003e\n\u003cli\u003eCross-Site Scripting (XSS) submissions with technical severity of P3 (moderate) and P4 (Low)\n\n\u003cul\u003e\n\u003cli\u003eThe following sites are not eligible for XSS escalation to P1 or P2\n\n\u003cul\u003e\n\u003cli\u003eprofreg.medscape.com\u003c/li\u003e\n\u003cli\u003elogin.medscape.com\u003c/li\u003e\n\u003cli\u003epowerpak.com\u003c/li\u003e\n\u003cli\u003eglobalacademycme.com\u003c/li\u003e\n\u003cli\u003emdedge.com\u003c/li\u003e\n\u003cli\u003ehttps://dev.powerpak.com\u003c/li\u003e\n\u003cli\u003ehttps://qa.powerpak.com\u003c/li\u003e\n\u003cli\u003ehttps://staging.powerpak.com\n– Dependency Confusion\nDependency Confusion / Unclaimed Package Names: Reports involving dependency confusion resulting from unclaimed npm packages or package names are out of scope. This includes additional occurrences involving different packages where the underlying root cause is the same organizational or supply-chain issue. Such reports may be considered duplicates of an existing finding or addressed through internal company-wide remediation processes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease be aware that the domains/subdomains in the attached PDF document are expressly out of scope for this program.\u003c/strong\u003e\u003cbr\u003e\n\u003cspan class=\"rp-resources__download-link bc-m-0 bc-icon bc-icon--after cc-icon--download\" data-tooltip-id=\"4af15546-ebce-4f19-94da-3ad8993ad030\"\u003e\u003ca href=\"https://bugcrowd.com/engagements/internetbrands-public/attachments/4af15546-ebce-4f19-94da-3ad8993ad030\" download\u003eOut of Scope Domains.pdf\u003c/a\u003e\u003c/span\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"c456b2af-ea20-44d8-b732-548461adee85","name":"In Scope","targets":[{"id":"97a1cf73-4036-4c82-91a9-7a2ad38fe381","uri":"https://www.carsdirect.com","name":"https://www.carsdirect.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e7df12ff-f93c-48f4-9f08-8f6153a11bad","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"97a1cf73-4036-4c82-91a9-7a2ad38fe381"},{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"97a1cf73-4036-4c82-91a9-7a2ad38fe381"},{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"97a1cf73-4036-4c82-91a9-7a2ad38fe381"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"97a1cf73-4036-4c82-91a9-7a2ad38fe381"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"97a1cf73-4036-4c82-91a9-7a2ad38fe381"}],"recentChangeFlags":null},{"id":"4de3db52-b500-4546-88cf-e006579eb7cd","uri":"https://pets.webmd.com","name":"https://pets.webmd.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"960da355-fc00-43e0-8192-b705b63cdf99","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"4de3db52-b500-4546-88cf-e006579eb7cd"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"4de3db52-b500-4546-88cf-e006579eb7cd"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4de3db52-b500-4546-88cf-e006579eb7cd"}],"recentChangeFlags":null},{"id":"1eed95f6-664c-4abd-b580-7dd24bb671c5","uri":"https://member.webmd.com","name":"https://member.webmd.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"737a9dd0-c967-45d0-9c3a-c100ef900099","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"},{"id":"6481be19-8d64-4bb2-8426-2f1f7afe32e6","name":"Modernizr","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"},{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"},{"id":"b6333057-ce1f-4205-bcb6-ce56be83543b","name":"Microsoft IIS","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1eed95f6-664c-4abd-b580-7dd24bb671c5"}],"recentChangeFlags":null},{"id":"99ec6d53-db97-4d55-9cfd-a9b1156dbc94","uri":"https://www.mdedge.com","name":"https://www.mdedge.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9b8544a5-f197-4a88-97ef-1d3bcc292b0e","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"99ec6d53-db97-4d55-9cfd-a9b1156dbc94"},{"id":"3a3487a7-9abf-45f0-8057-51dabed20371","name":"Drupal","targetId":"99ec6d53-db97-4d55-9cfd-a9b1156dbc94"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"99ec6d53-db97-4d55-9cfd-a9b1156dbc94"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"99ec6d53-db97-4d55-9cfd-a9b1156dbc94"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"99ec6d53-db97-4d55-9cfd-a9b1156dbc94"}],"recentChangeFlags":null},{"id":"d90b28b3-5fd4-4bcf-8c22-face5613c3ce","uri":"https://accounts.webmd.com","name":"https://accounts.webmd.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f6abb771-4e48-4945-bb65-9c84bb5a3c63","sortOrder":0},"sortOrder":0,"tags":[{"id":"6481be19-8d64-4bb2-8426-2f1f7afe32e6","name":"Modernizr","targetId":"d90b28b3-5fd4-4bcf-8c22-face5613c3ce"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"d90b28b3-5fd4-4bcf-8c22-face5613c3ce"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d90b28b3-5fd4-4bcf-8c22-face5613c3ce"}],"recentChangeFlags":null},{"id":"f72fcb75-4e5f-4b31-94cb-8479916175d3","uri":"https://powerpak.com","name":"https://powerpak.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5d86abd9-0d06-4c6b-803a-af06d2f54cf1","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"f72fcb75-4e5f-4b31-94cb-8479916175d3"},{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"f72fcb75-4e5f-4b31-94cb-8479916175d3"},{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"f72fcb75-4e5f-4b31-94cb-8479916175d3"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"f72fcb75-4e5f-4b31-94cb-8479916175d3"},{"id":"b6333057-ce1f-4205-bcb6-ce56be83543b","name":"Microsoft IIS","targetId":"f72fcb75-4e5f-4b31-94cb-8479916175d3"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f72fcb75-4e5f-4b31-94cb-8479916175d3"}],"recentChangeFlags":null},{"id":"57f8d33b-beaf-457b-a307-7a0df2aca4f7","uri":"https://profreg.medscape.com","name":"https://profreg.medscape.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"75110b49-9d3c-4a54-8b6c-f7afef552f64","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57f8d33b-beaf-457b-a307-7a0df2aca4f7"}],"recentChangeFlags":null},{"id":"f500758c-bac9-4868-919b-f4130b9032a8","uri":"https://www.globalacademycme.com","name":"https://www.globalacademycme.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e96907f1-02a2-490f-9304-ec3fce86f03f","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"f500758c-bac9-4868-919b-f4130b9032a8"},{"id":"3a3487a7-9abf-45f0-8057-51dabed20371","name":"Drupal","targetId":"f500758c-bac9-4868-919b-f4130b9032a8"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"f500758c-bac9-4868-919b-f4130b9032a8"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"f500758c-bac9-4868-919b-f4130b9032a8"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f500758c-bac9-4868-919b-f4130b9032a8"}],"recentChangeFlags":null},{"id":"83041473-f00f-40a3-977a-099fcfe70321","uri":"https://www.webmd.com","name":"https://www.webmd.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e0697b89-638b-400f-b593-b0a67e63d341","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"83041473-f00f-40a3-977a-099fcfe70321"},{"id":"6481be19-8d64-4bb2-8426-2f1f7afe32e6","name":"Modernizr","targetId":"83041473-f00f-40a3-977a-099fcfe70321"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"83041473-f00f-40a3-977a-099fcfe70321"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"83041473-f00f-40a3-977a-099fcfe70321"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"83041473-f00f-40a3-977a-099fcfe70321"}],"recentChangeFlags":null},{"id":"0c72d9eb-6205-43bb-afc3-0d6d918b22e9","uri":"https://login.medscape.com","name":"https://login.medscape.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f45e54e4-4434-452c-8e09-0313b7b4c530","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"0c72d9eb-6205-43bb-afc3-0d6d918b22e9"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0c72d9eb-6205-43bb-afc3-0d6d918b22e9"}],"recentChangeFlags":null},{"id":"0af2a152-7655-4502-bfba-4c2d7e7b71bd","uri":"https://portalv2.lh360.com","name":"https://portalv2.lh360.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"35a75d1f-d929-4471-8698-eeb94ff739ce","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0af2a152-7655-4502-bfba-4c2d7e7b71bd"}],"recentChangeFlags":null},{"id":"99f0a1d3-6bac-437b-9092-c84c8c420460","uri":"https://www.demandforced3.com/","name":"https://www.demandforced3.com/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"89eba5c1-2fac-4bec-bfb9-f4463bd05684","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"99f0a1d3-6bac-437b-9092-c84c8c420460"}],"recentChangeFlags":null},{"id":"87a64485-3d0e-46cc-a313-9205664a9b52","uri":"https://www.internetbrands.com","name":"https://www.internetbrands.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dfe6ace6-9574-4e1d-b5c1-319d219f20e9","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"87a64485-3d0e-46cc-a313-9205664a9b52"}],"recentChangeFlags":null},{"id":"86f282a3-e803-4e38-8fc2-0285223b619a","uri":"https://ibconnect.internetbrands.com","name":"https://ibconnect.internetbrands.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"deed7da5-5677-4640-a076-b81da3477fac","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"86f282a3-e803-4e38-8fc2-0285223b619a"}],"recentChangeFlags":null},{"id":"f46efb8d-0c90-45e4-aebb-56d72b388b1e","uri":"https://exchange.pulsepoint.com/AdminPortal/AdminDashBoard.aspx","name":"https://exchange.pulsepoint.com/AdminPortal/AdminDashBoard.aspx","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ba8ae752-bd65-4601-af65-5069e47a4714","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f46efb8d-0c90-45e4-aebb-56d72b388b1e"}],"recentChangeFlags":null},{"id":"6de7d3a4-f7a4-4636-b579-e0bae04af270","uri":"https://life.pulsepoint.com/Buyer/#/campaign","name":"https://life.pulsepoint.com/Buyer/#/campaign","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0a37662c-c93d-411b-8400-4bece349efa5","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6de7d3a4-f7a4-4636-b579-e0bae04af270"}],"recentChangeFlags":null},{"id":"9f9802ad-09cd-4003-abbd-f8eb984dc822","uri":"https://signal.pulsepoint.com/hcp365/#/dashboard/advertiser/6603/overview","name":"https://signal.pulsepoint.com/hcp365/#/dashboard/advertiser/6603/overview","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"eda20871-1ac2-462e-8dec-ce4e89cf81d1","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9f9802ad-09cd-4003-abbd-f8eb984dc822"}],"recentChangeFlags":null},{"id":"831854ba-1ce6-40ee-8eb5-9c376791a905","uri":"https://life.pulsepoint.com/MediaPlanner/#/dashboard/targetview","name":"https://life.pulsepoint.com/MediaPlanner/#/dashboard/targetview","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"eea01224-6801-4bc7-b45f-1e8dad299586","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"831854ba-1ce6-40ee-8eb5-9c376791a905"}],"recentChangeFlags":null},{"id":"481b67f4-3c20-42c1-9921-1d78d4cdd06d","uri":"https://signal.pulsepoint.com/hcpexplorer/#/dashboard/eventsExplorer","name":"https://signal.pulsepoint.com/hcpexplorer/#/dashboard/eventsExplorer","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"910824e5-ec3f-482b-99d6-64d83d5cfe51","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"481b67f4-3c20-42c1-9921-1d78d4cdd06d"}],"recentChangeFlags":null},{"id":"fcf00a3e-77c4-442d-8d1e-57374fd3897c","uri":"https://life.pulsepoint.com/EngagementAudience/#/dashboard","name":"https://life.pulsepoint.com/EngagementAudience/#/dashboard","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e84c9a87-d4c1-422b-8999-fe7e5889e81d","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fcf00a3e-77c4-442d-8d1e-57374fd3897c"}],"recentChangeFlags":null},{"id":"fca3ace5-bff4-4f4c-a105-e3bb37ec2128","uri":"https://exchange.pulsepoint.com","name":"https://exchange.pulsepoint.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"23a09a15-4f89-4e05-908a-ce3d75cffad4","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fca3ace5-bff4-4f4c-a105-e3bb37ec2128"}],"recentChangeFlags":null},{"id":"cde895ee-b386-43b6-b3ed-bda08b660e59","uri":"https://lifeapi.pulsepoint.com","name":"https://lifeapi.pulsepoint.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3d3dff0a-4285-4b24-8ba9-2cb07f521e73","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"cde895ee-b386-43b6-b3ed-bda08b660e59"}],"recentChangeFlags":null},{"id":"d4369c9c-5fcc-4262-8983-d856f6f1d02b","uri":"https://openapi.pulsepoint.com","name":"https://openapi.pulsepoint.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c775cc0d-b433-4bfc-ad7b-29bc91bcdd6c","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"d4369c9c-5fcc-4262-8983-d856f6f1d02b"}],"recentChangeFlags":null},{"id":"4ef37f1e-b90f-43e5-9e2d-99f70c5b0c96","uri":"https://openapitest.pulsepoint.com","name":"https://openapitest.pulsepoint.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4bfc7e00-24a7-404c-b703-b2e0f9397b32","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"4ef37f1e-b90f-43e5-9e2d-99f70c5b0c96"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"0c005445-ffd6-4996-b91e-3b97440d572d","p1MaxCents":200000,"p1MinCents":200000,"p2MaxCents":75000,"p2MinCents":75000,"p3MaxCents":10000,"p3MinCents":10000,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cul\u003e\n\u003cli\u003e\u003cp\u003eWebmd is an online publisher of news and information pertaining to human health and well being.\u003c/p\u003e\u003c/li\u003e\n\u003cli\u003e\u003cp\u003eLighthouse360+ provides customers with a robust solution to facilitate the relationship with patients, through communication and providing accessibility to self service.\u003c/p\u003e\u003c/li\u003e\n\u003cli\u003e\u003cp\u003eDemandforce provides customers with a robust solution to facilitate the relationship with patients, through communication and providing accessibility to self service.\u003c/p\u003e\u003c/li\u003e\n\u003cli\u003e\u003cp\u003ePowerpak provides educational programs for the broad spectrum of healthcare professionals.\u003c/p\u003e\u003c/li\u003e\n\u003cli\u003e\u003cp\u003eMedscape is the leading online global destination for physicians and healthcare professionals worldwide, offering the latest medical news and expert perspectives; essential point-of-care drug and disease information; and relevant professional education and CME.\u003c/p\u003e\u003c/li\u003e\n\u003cli\u003e\u003cp\u003eGlobal Academy for Medical Education LLC develops educational programs (live, web, and print) that are accredited through joint providership with ACCME-accredited providers.\u003c/p\u003e\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":2000,"max":2000},"2":{"min":750,"max":750},"3":{"min":100,"max":100},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"74472735-23da-4ed6-a7f6-ed868767831d","name":"Out of Scope","targets":[{"id":"e6cc3093-155e-4556-9808-8cba46ff3bac","uri":"","name":"See PDF","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f7d95cbd-ad49-4633-8668-e7a91baeb2b2","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"1f499a62-9eb9-45aa-a970-6bd99a61035e","uri":"","name":"https://www.powerpak.com/selectsurvey/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"643ed866-7e91-49ec-9f60-7f9cce3e195f","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"ba6a8a99-6c89-4755-ac87-7e7f4b35f822","uri":"","name":"https://www.medjobnetwork.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e4defa6b-2f55-494d-aa09-828e64f7845e","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"9391bc85-41ee-49d8-b130-63b819dba7c5","uri":"","name":"https://checkout.webmd.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"54c67a96-855f-433e-a772-ce0c26fe82d4","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eAll targets listed in this  \u003ca href=\"https://bugcrowd.com/engagements/internetbrands/attachments/3dee36b2-7caf-420d-9ea4-bbfea2a2c5b9?preview=792f96877cc086f6a8a9b39d095ea759\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePDF\u003c/a\u003e are considered out of scope in addition to the targets listed below. \u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"4af15546-ebce-4f19-94da-3ad8993ad030","attachmentPath":"https://bugcrowd.com/engagements/internetbrands-public/attachments/4af15546-ebce-4f19-94da-3ad8993ad030","name":"Out%2520of%2520Scope%2520Domains.pdf","filename":"Out%2520of%2520Scope%2520Domains.pdf","description":null,"icon":"fileOther","size":31527,"sizeLabel":"30.8 KB","uploadedAt":"10 Dec 2025","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/internetbrands-public/attachments/4af15546-ebce-4f19-94da-3ad8993ad030"}],"engagement":{"id":"f56f4fde-9e53-49f8-a6f3-adb1aaff40e9","code":"internetbrands-public","state":"in_progress","endsAt":null,"bountyId":"613acc4f-31e6-49b4-be73-84e22055e723","startsAt":"2024-03-06T19:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Technology","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/cbac/36d8/5c4ca4e6/3b24d672a54a33c9f9c421d0101b7ef9_1522877502127.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2024-03-06T19:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/internetbrands-public","changelogs":"/engagements/internetbrands-public/changelog","submissions":null,"announcements":"/engagements/internetbrands-public/announcements","hallOfFame":"/engagements/internetbrands-public/hall_of_fames","crowdstream":"/engagements/internetbrands-public/crowdstream"},"announcementsCount":3,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/internetbrands-public/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=internetbrands-public\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/internetbrands-public/engagement_subscribers","engagementChangelogsUrl":"/engagements/internetbrands-public/changelog","publishedAt":"2026-09-02T19:22:14.315Z","engagementChangelogUrl":"/engagements/internetbrands-public/changelog/5d8af978-978d-4a0a-87d5-2ae0ab0dc2af","createUserFeedbacksUrl":"/engagements/internetbrands-public/feedbacks","engagementCrowdstreamUrl":"/engagements/internetbrands-public/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}