Airbnb · Report #49356
I Can Delete Any Airbnb Users Symbol!
Validstatus
5upvotes
3 Jul 2015disclosed
How it was found
Hello Team, I Noticed a Critical Flow that allows attacker to Delete Any Airbnb users Symbol!
ex: https://create.airbnb.com/16925230/symbol/delete
- Just Copy The link and replace victim's profile id with
16925230. - Run the URL.
- Victims Symbol will be deleted!
Looking Forward!