HexBrain

Bumble · Report #182467

Email Spoofing

Validstatus
lowseverity
28upvotes
24 Jan 2017disclosed

How it was found

There is an Email Spoofing Vulnerability. Steps to reproduce:

  1. Go to http://emkei.cz/
  2. Fill "From Email" field to [email protected] or any other badoo email.
  3. Fill the victim's address (your address) to "TO" field and fill in other details as you wish. You will receive email from badoo admin. Reference: https://hackerone.com/reports/575 Thank you for time and consideration you provided for reading my report. Note: If you don't find it in your inbox, see spam folder. If the victim is using Gmail account it might be in spam folder. In other mailing service like yahoo it is directly recieved in inbox. Your sincerely, Abiral Shrestha

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original