writeups.xyz / TopCoder.com Vulnerabilities – A tail of site-wide bugs leads to accounts compromise & payments hijacking

Submitter : c2a

Date: 28 June 2016

Bounty : undisclosed

Vulnerabilities :

• CSRF
• Account Takeover

Programs :

• Topcoder.com

Authors :

• Mohamed A. Baset

Link :
https://www.seekurity.com/blog/general/topcoder-vulnerabilities-a-tail-of-site-wide-bugs-leads-to-accounts-compromise-payments-hijacking/