Skip to content
BackEsc
Sign in

MTN Group · disclosed reports

Cross-site Scripting

26 disclosed reports · $0 paid

Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.

Open MTN Group on HackerOne
reports
26
paid a bounty
0

Every one of the 26 is a mark on the map. Named now: 1 to 26, most upvoted first.

  1. DOM Based Reflected Cross Site Scripting#2321874MTN Group · 104 votes
  2. Reflected cross site scripting (XSS) attacks Reflected XSS attacks,#1799197MTN Group · 100 votes
  3. cross site scripting reflected#1496897MTN Group · 81 votes
  4. Reflected XSS in https://nin.mtn.ng/nin/success?message=lol&nin=<VULNERABLE>#2039384MTN Group · 70 votes
  5. Reflected - XSS#1779447MTN Group · 63 votes
  6. Cross-Site Scripting through search form on mtnplay.co.zm#761573MTN Group · 40 votes
  7. POST BASED REFLECTED XSS IN dailydeals.mtn.co.za#1451394MTN Group · 35 votes
  8. Cross-site Scripting (XSS) - Reflected#1183336MTN Group · 34 votes
  9. Reflected Cross-Site scripting in : mtn.bj#1264832MTN Group · 33 votes
  10. Cross-site Scripting (XSS) - Reflected on https://api.mtn.sd/carbon/admin/login.jsp via `msgId` parameter - CVE-2020-17453#1158823MTN Group · 30 votes
  11. Reflected Cross Site Scripting Cisco ASA on myvpn.mtncameroon.net CVE-2020-3580#1247833MTN Group · 28 votes
  12. RXSS - http://macademy.mtnonline.com#1091165MTN Group · 23 votes
  13. Reflected XSS on mtnhottseat.mtn.com.gh#1069527MTN Group · 22 votes
  14. Reflected XSS on dailydeals.mtn.co.za#1212235MTN Group · 19 votes
  15. Cross-site Scripting (XSS) - Reflected on http://callertunez.mtn.com.gh/wap/noauth/sharedetail.ftl via `callback` parameter#1147176MTN Group · 17 votes
  16. Reflected XSS on play.mtn.co.za#1061199MTN Group · 17 votes
  17. HTML injection in email content during registration via FirstName/LastName parameter#1256496MTN Group · 16 votes
  18. xss on [developers.mtn.com]#924851MTN Group · 16 votes
  19. Reflected XSS at dailydeals.mtn.co.za#1210921MTN Group · 15 votes
  20. Reflected XSS on gamesclub.mtn.com.g#1069528MTN Group · 15 votes
  21. cross site scripting in : mtn.bj#1264834MTN Group · 14 votes
  22. Cross-site Scripting (XSS) - Reflected on http://h1b4e.n2.ips.mtn.co.ug:8080 via Nginx-module#1159362MTN Group · 12 votes
  23. Reflected XSS in chatbot#1735622MTN Group · 10 votes
  24. Reflected xss on videostore.mtnonline.com#1646248MTN Group · 10 votes
  25. XSS at http://nextapps.mtnonline.com/search/suggest/q/{xss payload}#1244722MTN Group · 9 votes
  26. XSS at videostore.mtnonline.com/GL/*.aspx via all parameters#1244731MTN Group · 6 votes

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in