Bug bounty program
MG
MTN Group
Most upvoted reports128
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection on cookie parameterAnalysed#761304 | SQL Injection | 2020-05-03 | – | 323 |
| SQLi | in URL pathsAnalysed#2958619 | SQL Injection | 2025-03-06 | – | 149 |
| IDOR at mtnmobad.mtnbusiness.com.ng leads to PII leakage.Analysed#1773609 | Insecure Direct Object Reference | 2024-10-05 | – | 135 |
| Yet Another OTP code Leaked in the API ResponseAnalysed#2635315 | Authentication | 2025-01-08 | – | 135 |
| FULL ACCOUNT TAKEOVERAnalysed#2542372 | No weakness recorded | 2024-08-17 | – | 123 |
| SQL injection in URL path leads to Database AccessAnalysed#2633959 | SQL Injection | 2025-01-08 | – | 115 |
| Authentication Bypass Leads To Complete Account TakeveOver on ██████████Analysed#1709881 | Authentication | 2024-09-14 | – | 109 |
| DOM Based Reflected Cross Site ScriptingAnalysed#2321874 | Cross-site Scripting | 2024-12-25 | – | 104 |
| Reflected cross site scripting (XSS) attacks Reflected XSS attacks,Analysed#1799197 | Cross-site Scripting | 2024-08-30 | – | 100 |
| Ability to Add and Verify Uncontrolled Mobile Numbers Leading to Account Takeover (ATO)Analysed#2762462 | Authentication | 2025-03-04 | – | 98 |
Subdomains214,285
| Name | Scope | First seen |
|---|---|---|
| dhcp-129-105-182-130.athletics.0-197-96.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.0.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.0.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.1.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.1.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.10.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.10.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.100.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.100.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.101.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.101.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.102.0.mtn.cm | Not in the scope | 2026-11-14 |
| lhost-154.70.102.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.103.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.103.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.104.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.104.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.105.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.105.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.106.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.106.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.107.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.107.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.108.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.108.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.109.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.109.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.11.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.11.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.110.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.110.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.111.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.111.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.112.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.112.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.113.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.113.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.114.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.114.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.115.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.115.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.116.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.116.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.117.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.117.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.118.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.118.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.119.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.119.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.12.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.12.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.120.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.120.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.121.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.121.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.122.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.122.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.123.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.124.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.125.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.125.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.126.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-154.70.126.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.127.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.128.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.129.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.13.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.130.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.132.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.133.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.134.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.135.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.136.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.137.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.138.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.139.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.14.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.14.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.140.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.141.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.142.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.143.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.144.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.145.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.146.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.147.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.148.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.149.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.15.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-41.205.15.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.150.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.151.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.152.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.153.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.154.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.155.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.156.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.157.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.158.0.mtn.cm | Not in the scope | 2026-11-14 |
| host-129.0.159.0.mtn.cm | Not in the scope | 2026-11-14 |
28 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.