writeups.xyz / [Responsible disclosure] How I could have booked movie tickets through other user accounts

Submitter : c2a

Date: 18 June 2018

Bounty : undisclosed

Vulnerabilities :

• Password Reset
• Account Takeover
• Bruteforce
• OTP Bypass

Programs :

• AGS Cinemas

Authors :

• Bharathvaj Ganesan

Link :
https://medium.com/bugbountywriteup/responsible-disclosure-how-i-could-have-booked-movie-tickets-through-other-user-accounts-2db26a037b4c