Razer · Report #811111
SQL Injection in https://api-my.pay.razer.com/inviteFriend/getInviteHistoryLog
$2,000bounty
528upvotes
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.