writeups.xyz / #BugBounty — How I was able to delete anyone’s account in an Online Car Rental Company

Submitter : c2a

Date: 14 January 2018

Bounty : undisclosed

Vulnerabilities :

• CSRF
• Parameter Tampering

Programs :

• Undisclosed

Authors :

• Avinash Jain (@Logicbomb_1)

Link :
https://medium.com/bugbountywriteup/bugbounty-how-i-was-able-to-delete-anyones-account-in-an-online-car-rental-company-8a4022cc611