Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2016/10/28 10:8 a.m.18 views

Bumble: Arbitrary modification value "session" (Cookie) in badoo.com

Users who log on through https://m.badoo.com/ receive a session cookie named "session" whose value represents the user identifier. I have found a way to change the value of the cookie, this error can be used to: Leave off the application to a particular user to log on again, the attacker would ha...

0.6AI score
SaveExploits0
Rows per page
Query Builder