writeups.xyz / Popping a shell on the Oculus developer portal

Submitter : c2a

Date: 31 August 2014

Bounty : 30,000

Vulnerabilities :

• SQL Injection
• CSRF
• RCE
• IDOR

Programs :

• Meta / Facebook

Authors :

• Bitquark (@Bitquark)

Link :
https://bitquark.co.uk/blog/2014/08/31/popping_a_shell_on_the_oculus_developer_portal