writeups.xyz / How I was able to see any private album passwrod in Picturepush — IDOR

Submitter : c2a

Date: 23 May 2018

Bounty : undisclosed

Vulnerabilities :

• IDOR

Programs :

• PicturePush

Authors :

• Murtada Kamil

Link :
https://medium.com/@r99tiq/idor-how-i-was-able-to-see-any-private-album-passwrod-in-picturepush-264913f45e10