writeups.xyz / Host Header Injection Lead To Account Takeovers

Submitter : c2a

Date: 9 January 2022

Bounty : undisclosed

Vulnerabilities :

• Host Header Injection
• Password Reset
• Account Takeover

Programs :

• Undisclosed

Authors :

• M7.Arman (@ArmanSecurity)

Link :
https://systemweakness.com/host-header-injection-lead-to-account-takeover-2f025a645d13