Uber · Report #361623
SQLI on uberpartner.eu leads to exposure of sensitive user data of Uber partners
Validstatus
highseverity
$1,500bounty
43upvotes
15 Mar 2021disclosed
Summary
The Uber EU test site has a SQLI vulnerability exposing several databased and based on the database names, may expose hashed passwords and Uber partner information.
Basic time-based SQLI that disclosed a database on a Uber EU test site.
Check out my blog https://healdb.tech/blog/ or my Twitter https://twitter.com/heald_ben for some Bug Bounty tool releases and blogs!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.