Skip to content
Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform
samcurry.net | blog | #bug-bounty | #web-security | #pii | #directory-traversal | #yahoo | #credit-card
Summary
A directory traversal on Yahoo's small business platform let attackers view customer credit-card data by brute-forcing a predictable service ID; the writeup covers stack recon and the data-leak path.
- Published
- Collected