Bug bounty program
MG
MTN Group
Most upvoted reports128
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection on cookie parameterAnalysed#761304 | SQL Injection | 2020-05-03 | – | 323 |
| SQLi | in URL pathsAnalysed#2958619 | SQL Injection | 2025-03-06 | – | 149 |
| IDOR at mtnmobad.mtnbusiness.com.ng leads to PII leakage.Analysed#1773609 | Insecure Direct Object Reference | 2024-10-05 | – | 135 |
| Yet Another OTP code Leaked in the API ResponseAnalysed#2635315 | Authentication | 2025-01-08 | – | 135 |
| FULL ACCOUNT TAKEOVERAnalysed#2542372 | No weakness recorded | 2024-08-17 | – | 123 |
| SQL injection in URL path leads to Database AccessAnalysed#2633959 | SQL Injection | 2025-01-08 | – | 115 |
| Authentication Bypass Leads To Complete Account TakeveOver on ██████████Analysed#1709881 | Authentication | 2024-09-14 | – | 109 |
| DOM Based Reflected Cross Site ScriptingAnalysed#2321874 | Cross-site Scripting | 2024-12-25 | – | 104 |
| Reflected cross site scripting (XSS) attacks Reflected XSS attacks,Analysed#1799197 | Cross-site Scripting | 2024-08-30 | – | 100 |
| Ability to Add and Verify Uncontrolled Mobile Numbers Leading to Account Takeover (ATO)Analysed#2762462 | Authentication | 2025-03-04 | – | 98 |
Subdomains214,285
| Name | Scope | First seen |
|---|---|---|
| 1188.mtn.com.gh | Not in the scope | 2026-11-14 |
| 3p-integrations.mtn.com.gh | Not in the scope | 2026-11-14 |
| acceptableuse.mtn.com.gh | Not in the scope | 2026-11-14 |
| acsinvigo.mtn.com.gh | Not in the scope | 2026-11-14 |
| ad.mtn.com.gh | Not in the scope | 2026-11-14 |
| admin.mtn.com.ghadmin | Not in the scope | 2026-11-14 |
| advertizer.mtn.com.gh | Not in the scope | 2026-11-14 |
| adm.advertizer.mtn.com.ghadmin | Not in the scope | 2026-11-14 |
| ads.advertizer.mtn.com.gh | Not in the scope | 2026-11-14 |
| agentsimswap.mtn.com.gh | Not in the scope | 2026-11-14 |
| aml.mtn.com.gh | Not in the scope | 2026-11-14 |
| antispam.mtn.com.gh | Not in the scope | 2026-11-14 |
| appchallenge.mtn.com.gh | Not in the scope | 2026-11-14 |
| appdecconsolestaging.mtn.com.gh | Not in the scope | 2026-11-14 |
| appdesstaging.mtn.com.gh | Not in the scope | 2026-11-14 |
| appdeumstaging.mtn.com.gh | Not in the scope | 2026-11-14 |
| appointments.mtn.com.gh | Not in the scope | 2026-11-14 |
| appschallenge.mtn.com.gh | Not in the scope | 2026-11-14 |
| appviewxghana.mtn.com.gh | Not in the scope | 2026-11-14 |
| www.appviewxghana.mtn.com.gh | Not in the scope | 2026-11-14 |
| archibus.mtn.com.gh | Not in the scope | 2026-11-14 |
| as-anycast0.mtn.com.gh | Not in the scope | 2026-11-14 |
| as-anycast1.mtn.com.gh | Not in the scope | 2026-11-14 |
| as-avayaworkspace.mtn.com.gh | Not in the scope | 2026-11-14 |
| www.as-avayaworkspace.mtn.com.gh | Not in the scope | 2026-11-14 |
| as-cache0.mtn.com.gh | Not in the scope | 2026-11-14 |
| as-cache1.mtn.com.gh | Not in the scope | 2026-11-14 |
| as-mtnnoctelephony.mtn.com.gh | Not in the scope | 2026-11-14 |
| asappctl.mtn.com.gh | Not in the scope | 2026-11-14 |
| ascacti.mtn.com.gh | Not in the scope | 2026-11-14 |
| association.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-anycast0.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-anycast1.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-avayaworkspace.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-cache0.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-cache1.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-cache3.mtn.com.gh | Not in the scope | 2026-11-14 |
| at-mtnnoctelephony.mtn.com.gh | Not in the scope | 2026-11-14 |
| atcacti.mtn.com.gh | Not in the scope | 2026-11-14 |
| atnagios.mtn.com.gh | Not in the scope | 2026-11-14 |
| atsmokeping.mtn.com.gh | Not in the scope | 2026-11-14 |
| auction.mtn.com.gh | Not in the scope | 2026-11-14 |
| auctionapi.mtn.com.gh | Not in the scope | 2026-11-14 |
| audioconference.mtn.com.gh | Not in the scope | 2026-11-14 |
| auth.mtn.com.ghauth | Not in the scope | 2026-11-14 |
| authuat.mtn.com.gh | Not in the scope | 2026-11-14 |
| autodiscover.mtn.com.ghmail | Not in the scope | 2026-11-14 |
| avedge.mtn.com.gh | Not in the scope | 2026-11-14 |
| axon.mtn.com.gh | Not in the scope | 2026-11-14 |
| axonf2f-acceptor.mtn.com.gh | Not in the scope | 2026-11-14 |
| axonf2f-api.mtn.com.ghapi | Not in the scope | 2026-11-14 |
| axonf2f-gui.mtn.com.gh | Not in the scope | 2026-11-14 |
| axonf2f-guitest.mtn.com.gh | Not in the scope | 2026-11-14 |
| bfm.mtn.com.gh | Not in the scope | 2026-11-14 |
| billingtransparencyapi.mtn.com.gh | Not in the scope | 2026-11-14 |
| botdev.mtn.com.gh | Not in the scope | 2026-11-14 |
| broadband.mtn.com.gh | Not in the scope | 2026-11-14 |
| broadbandhe.mtn.com.gh | Not in the scope | 2026-11-14 |
| broadbandheprod.mtn.com.gh | Not in the scope | 2026-11-14 |
| broadbandmaps.mtn.com.gh | Not in the scope | 2026-11-14 |
| bss5-sso.mtn.com.ghauth | Not in the scope | 2026-11-14 |
| bulksms.mtn.com.gh | Not in the scope | 2026-11-14 |
| business.mtn.com.gh | Not in the scope | 2026-11-14 |
| store.business.mtn.com.gh | Not in the scope | 2026-11-14 |
| www.store.business.mtn.com.gh | Not in the scope | 2026-11-14 |
| cache0.mtn.com.gh | Not in the scope | 2026-11-14 |
| cache1.mtn.com.gh | Not in the scope | 2026-11-14 |
| cache2.mtn.com.gh | Not in the scope | 2026-11-14 |
| cacti.mtn.com.gh | Not in the scope | 2026-11-14 |
| callerfeel.mtn.com.gh | Not in the scope | 2026-11-14 |
| callertunez.mtn.com.gh | Not in the scope | 2026-11-14 |
| callertunezapp.mtn.com.gh | Not in the scope | 2026-11-14 |
| callertunezhe.mtn.com.gh | Not in the scope | 2026-11-14 |
| callertunezuat.mtn.com.gh | Not in the scope | 2026-11-14 |
| callertunezwap.mtn.com.gh | Not in the scope | 2026-11-14 |
| careerfair.mtn.com.gh | Not in the scope | 2026-11-14 |
| careermanagementportal.mtn.com.gh | Not in the scope | 2026-11-14 |
| ccealert.mtn.com.gh | Not in the scope | 2026-11-14 |
| cg.mtn.com.gh | Not in the scope | 2026-11-14 |
| chat.mtn.com.gh | Not in the scope | 2026-11-14 |
| chatbot-dashboard.mtn.com.ghadmin | Not in the scope | 2026-11-14 |
| chatbot-dev.mtn.com.ghdev | Not in the scope | 2026-11-14 |
| chatbot-prod.mtn.com.gh | Not in the scope | 2026-11-14 |
| chatbot-stg.mtn.com.ghstaging | Not in the scope | 2026-11-14 |
| cloudivr.mtn.com.gh | Not in the scope | 2026-11-14 |
| confidentialinformation.mtn.com.gh | Not in the scope | 2026-11-14 |
| conflict.mtn.com.gh | Not in the scope | 2026-11-14 |
| conflictadmin.mtn.com.gh | Not in the scope | 2026-11-14 |
| conflictapi.mtn.com.gh | Not in the scope | 2026-11-14 |
| connect.mtn.com.gh | Not in the scope | 2026-11-14 |
| corpnet2.mtn.com.gh | Not in the scope | 2026-11-14 |
| cr7live.mtn.com.gh | Not in the scope | 2026-11-14 |
| ctdistributor.mtn.com.gh | Not in the scope | 2026-11-14 |
| ctsagent.mtn.com.gh | Not in the scope | 2026-11-14 |
| ctsagent1.mtn.com.gh | Not in the scope | 2026-11-14 |
| cugapi.mtn.com.gh | Not in the scope | 2026-11-14 |
| customerapn.mtn.com.gh | Not in the scope | 2026-11-14 |
| customersurvey.mtn.com.gh | Not in the scope | 2026-11-14 |
| datasimreg.mtn.com.gh | Not in the scope | 2026-11-14 |
| deviceupgrade.mtn.com.gh | Not in the scope | 2026-11-14 |
28 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.