PayPal Inc Account System - Delete Any Account (Session Delete) [Auth Bypass] Vulnerability

Members Login

Post Info

TOPIC: PayPal Inc Account System - Delete Any Account (Session Delete) [Auth Bypass] Vulnerability

budnonymous

Top Poster

Status: Offline

Posts: 3757

Date: Aug 30, 2013

PayPal Inc Account System - Delete Any Account (Session Delete) [Auth Bypass] Vulnerability	Permalink

Looks like it's been fixed. [Maybe] Read where Paypal already claimed to have fixed it back in May, which turned out to be a falsehood. It also did not say for sure that they paid the Bug Bounty Hunter, and they have a reputation for ripping them off. Click the bug bounty tag here. PayPal fixes critical account switcheroo bug after researcher tipoff __________________ Capp Vids \| Capp WP \| Tweetstream Exposing the sleazery of ebaY and PayPal

Page 1 of 1 sorted by

Quick Reply
Please log in to post quick replies.

PayPal fixes critical account switcheroo bug after researcher tipoff