writeups.xyz / Luminate Store Basics defacement and potential takeover

Submitter : c2a

Date: 30 August 2017

Bounty : undisclosed

Vulnerabilities :

• CSRF
• Session Management Issue

Programs :

• Yahoo! / Verizon Media

Authors :

• Rojan Rijal (@Uraniumhacker)

Link :
https://medium.com/@rojanrijal/luminate-store-basics-defacement-and-potential-takeover-3b53d1e45b4f