writeups.xyz / [Bug bounty | mail.ru] Access to the admin panel of the partner site and data disclosure of 2 million users

Submitter : c2a

Date: 12 October 2018

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Blind XSS

Programs :

• Mail.ru

Authors :

• Max (@ISecMax)

Link :
https://medium.com/bugbountywriteup/bug-bounty-mail-ru-234fa6f5a5a