Back to directory
WRITEUP #1280

Break the Logic: Playing with product ratings on a shopping site(600$)

Logic BugLogic flawParameter tampering
byFırat
Bounty
600
Program
-
Published
Apr 18, 2023
Added to HackDex
Apr 27, 2023
Read Full Writeuphttps://infosecwriteups.com/break-the-logic-playing-with-product-ratings-on-a-shopping-site-600-c9a87fb66a73
RELATED WRITEUPS
Logic Flaw: I Can Block You from Accessing Your Own Account
Logic BugLogic flaw
“Like” Bypass on Customer Reviews — €500 bounty
Logic BugLogic flaw
[$500] How I was able to give verification badge to any YouTube channel and bypass needed requirements
OtherParameter tampering
Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP
Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat