HexBrain

Veris · Report #123380

Creating multiple user with the same link which is sent to email after registeration

Validstatus
3upvotes
12 Jun 2016disclosed

How it was found

  1. Go to the Link for register 2.Email will be sent to the user - Email id 3.Access the same Link in 2 different browser ( Google Chrome , Firefox) 4.Change the username in each browser !!!!
  2. Still it works !!!

I guess you got to know what the problem is !!!! the Link sent to the Email id for registration ( Activation Link) can be miss used !!!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original