writeups.xyz / Paypal bug $10K - All Secondary users account takeover leads to unauthorized money transfer from paypal business accounts

Submitter : c2a

Date: 30 July 2019

Bounty : 10,500

Vulnerabilities :

• IDOR

Programs :

• Paypal

Authors :

• Mohd Haji (@Mohdhaji24)

Link :
https://web.archive.org/web/20210124152317/https://whitehathaji.blogspot.com/2019/07/paypal-bug-10k-all-secondary-users.html