Browse / InnoGames

InnoGames

See its reports on the map

What gets reported to InnoGames

• Misconfiguration2
• Access Control2
• SQL Injection1
• Information Disclosure1
• Business Logic1
• Cross-site Scripting1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Blind SQL Injection SQL Injection
   $2,000432 votes
2. Chaining Bugs: Leakage of CSRF token which leads to Stored XSS and Account Takeover (xs1.tribalwars.cash)Insecure Storage of Sensitive Information
   $1,100186 votes
3. Race condition in activating email resulting in infinite amount of diamonds receivedTime-of-check Time-of-use (TOCTOU) Race Condition
   $2,000137 votes
4. Create any military unit in any ageImproper Check or Handling of Exceptional Conditions
   $1,10089 votes
5. Cache Poisoning via uppercase letters in invalid pathViolation of Secure Design Principles
   $55082 votes
6. Unprivileged alliance member is able to recruit new members to his alliance and accepting them (xs1.grepolis.com)Privilege Escalation
   $55070 votes
7. Impersonation and ticket id enumeration on support.innogames.comImproper Authorization
   $5508 votes
8. Stored XSS on recruit.innogames.deCross-site Scripting (XSS) - Stored
   $5007 votes