Logic flaws and vulnerabilities in Air China APP order logistics information query

Air China App is a mobile software for national aviation service. A logic flaw vulnerability exists at the Air China APP order logistics information query. An attacker can use the vulnerability to view the logistics information of any order, including sensitive information such as the user's...

SMS Bombing Vulnerability in Air China's Android Client

Air China Android client is an airplane flight inquiry service software. An SMS bombing vulnerability exists in the Air China Android client - Zhiyin Mall at the order submission. An attacker is allowed to replay this interface for SMS bombing, which constitutes system resource consumption...

big5.airchinagroup.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-125643 Description| Value ---|--- Affected Website:| big5.airchinagroup.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...