Bug bounty program
MV
Mobile Vikings
- Platform
- Intigriti
- Bounties
- Pays
- Assets in scope
- 18
- Disclosed reports
- 11
Most upvoted reports11
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Insecure crossdomain.xml#44652 | Information Disclosure | 2015-04-04 | – | 6 |
| Username and sim id enum#47358 | Information Disclosure | 2015-03-04 | – | 3 |
| Enum phone numbers thru /en/sims/topup/add/#47362 | Authentication | 2015-04-03 | – | 3 |
| Approve topup method by sender of this method#47384 | Authentication | 2015-03-04 | – | 3 |
| Stored XSS in Direct debit name#45233 | Cross-site Scripting | 2015-03-04 | – | 2 |
| Number, username and name disclosure#45243 | Information Disclosure | 2015-03-04 | – | 2 |
| Reflected xss in user name thru cookie#47341 | Cross-site Scripting | 2015-03-04 | – | 2 |
| Stored xss in user name#47343 | Cross-site Scripting | 2015-03-04 | – | 2 |
| Stored xss in user name (2) affected another user.#47349 | Cross-site Scripting | 2015-03-04 | – | 2 |
| CSRF token from another valid user session accepted#47357 | Cross-Site Request Forgery | 2015-04-03 | – | 2 |
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.