Back to directory

WRITEUP #3166

Gumtree – leaking your data and not really listening

IDOR

by@AlanMonie(Alan Monie)

Program

Gumtree

Published

Dec 15, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://www.pentestpartners.com/security-blog/gumtree-leaking-your-data-and-not-really-listening/

▸ RELATED WRITEUPS

Zomatoooo! IDOR in Saved Payments

How I got my first $13500 bounty through Parameter Polluting (HPP)

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel

IDORBroken Access Control

Bypassing ACLs – IDOR exploitation via HPP

IDORHTTP parameter pollution

Built with ❤️ by Shubham Rawat