Back to directory
WRITEUP #4812

Weak session validation bug let you login even after changing the session IDs and logging out from the accounts

Logic BugLogic flawSession management issue
by@manas_hunter(Manasjha)
Program
viator.com
Published
Mar 16, 2020
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://medium.com/@manasjha7965/weak-session-validation-bug-let-you-login-even-after-changing-the-session-ids-and-logging-out-from-4bb3ee29a598
RELATED WRITEUPS
Logic Flaw: I Can Block You from Accessing Your Own Account
Logic BugLogic flaw
“Like” Bypass on Customer Reviews — €500 bounty
Logic BugLogic flaw
Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP
Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat