Bumble · Report #182467
Email Spoofing
Validstatus
lowseverity
28upvotes
24 Jan 2017disclosed
How it was found
There is an Email Spoofing Vulnerability. Steps to reproduce:
- Go to http://emkei.cz/
- Fill "From Email" field to [email protected] or any other badoo email.
- Fill the victim's address (your address) to "TO" field and fill in other details as you wish. You will receive email from badoo admin. Reference: https://hackerone.com/reports/575 Thank you for time and consideration you provided for reading my report. Note: If you don't find it in your inbox, see spam folder. If the victim is using Gmail account it might be in spam folder. In other mailing service like yahoo it is directly recieved in inbox. Your sincerely, Abiral Shrestha