Uber · Report #126536
SMS Flood with Update Profile
Duplicatestatus
1upvotes
13 Jun 2016disclosed
How it was found
SMS will send when user update the profile and keep updating the user profile will result in keep sending the SMS, Step to reproduce
- Login to https://riders.uber.com
- Go to https://riders.uber.com/profile
- Update the Account Information, any field for Example FirstName
- A SMS wil be received in the PHONE, saying that , your account information is updated
- Use OWSAP ZAP to replay the packet and UBER will keep sending the SMS