PII data leak

**You are viewing our old website - new website soon...!**

We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.

Stay tuned for updates coming soon!

FirstBlood-#1061 — PII data leak
This issue was discovered on FirstBlood v3

This report has been reviewed and accepted as a valid vulnerability on FirstBlood!

On 2022-12-08, twsec Level 2 reported:


        i have discovered an PII info leak while navigating to /api/doctors.php

This report has been publicly disclosed for everyone to view

P2 High

Endpoint: /api/doctor.php

Parameter: /api/doctors.php

Payload: /api/doctor.php

FirstBlood ID: 66
Vulnerability Type: Information leak/disclosure

It is possible to leak doctors private information such as email and phone number via the /api/doctors.php endpoint. No authentication is needed.

Report Feedback

@zseano

Creator & Administrator

Congratulations you were the second user to discover this!