Bug bounty program
MG
MTN Group
Most upvoted reports128
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection on cookie parameterAnalysed#761304 | SQL Injection | 2020-05-03 | – | 323 |
| SQLi | in URL pathsAnalysed#2958619 | SQL Injection | 2025-03-06 | – | 149 |
| IDOR at mtnmobad.mtnbusiness.com.ng leads to PII leakage.Analysed#1773609 | Insecure Direct Object Reference | 2024-10-05 | – | 135 |
| Yet Another OTP code Leaked in the API ResponseAnalysed#2635315 | Authentication | 2025-01-08 | – | 135 |
| FULL ACCOUNT TAKEOVERAnalysed#2542372 | No weakness recorded | 2024-08-17 | – | 123 |
| SQL injection in URL path leads to Database AccessAnalysed#2633959 | SQL Injection | 2025-01-08 | – | 115 |
| Authentication Bypass Leads To Complete Account TakeveOver on ██████████Analysed#1709881 | Authentication | 2024-09-14 | – | 109 |
| DOM Based Reflected Cross Site ScriptingAnalysed#2321874 | Cross-site Scripting | 2024-12-25 | – | 104 |
| Reflected cross site scripting (XSS) attacks Reflected XSS attacks,Analysed#1799197 | Cross-site Scripting | 2024-08-30 | – | 100 |
| Ability to Add and Verify Uncontrolled Mobile Numbers Leading to Account Takeover (ATO)Analysed#2762462 | Authentication | 2025-03-04 | – | 98 |
Subdomains214,285
| Name | Scope | First seen |
|---|---|---|
| test.irancell.irtest | Not in the scope | 2026-11-14 |
| api-uat.lonestarcell.comapi, test | Not in the scope | 2026-11-14 |
| cms-uat.lonestarcell.comadmin, test | Not in the scope | 2026-11-14 |
| ecw-test.lonestarcell.comtest | Not in the scope | 2026-11-14 |
| www.api-uat.lonestarcell.comapi, test | Not in the scope | 2026-11-14 |
| www.cms-uat.lonestarcell.comadmin, test | Not in the scope | 2026-11-14 |
| test.mtn.bjtest | Not in the scope | 2026-11-14 |
| mymtnapp-uat.mtn.bjtest | Not in the scope | 2026-11-14 |
| test.myspeedtest.mtn.bjtest | Not in the scope | 2026-11-14 |
| demo.mtn.citest | Not in the scope | 2026-11-14 |
| www.demo.mtn.citest | Not in the scope | 2026-11-14 |
| testing.collab.mtn.citest | Not in the scope | 2026-11-14 |
| ewp-test.mobilemoney.mtn.citest | Not in the scope | 2026-11-14 |
| www.ewp-test.mobilemoney.mtn.citest | Not in the scope | 2026-11-14 |
| test.mtn.cmtest | Not in the scope | 2026-11-14 |
| uat-dbss.mtn.cmtest | Not in the scope | 2026-11-14 |
| uat-shop.mtn.cmtest | Not in the scope | 2026-11-14 |
| yip-test.mtn.cmtest | Not in the scope | 2026-11-14 |
| esim-test.mtn.cmtest | Not in the scope | 2026-11-14 |
| fraud-test.mtn.cmtest | Not in the scope | 2026-11-14 |
| mtnc-uat-sso.mtn.cmauth, test | Not in the scope | 2026-11-14 |
| test.carrygo.mtn.cmtest | Not in the scope | 2026-11-14 |
| test-cvselect.mtn.cmtest | Not in the scope | 2026-11-14 |
| uat.yellosoft.mtn.cmtest | Not in the scope | 2026-11-14 |
| uat-dbss-minio.mtn.cmdata, test | Not in the scope | 2026-11-14 |
| test.yellokiosk.mtn.cmtest | Not in the scope | 2026-11-14 |
| backend-uat-shop.mtn.cmtest | Not in the scope | 2026-11-14 |
| camunda-dbss-uat.mtn.cmtest | Not in the scope | 2026-11-14 |
| test.agentletters.mtn.cmtest | Not in the scope | 2026-11-14 |
| test.agentvetting.mtn.cmtest | Not in the scope | 2026-11-14 |
| uat-minesecpayapi.mtn.cmtest | Not in the scope | 2026-11-14 |
| career-portal-test.mtn.cmtest | Not in the scope | 2026-11-14 |
| uat-api.digitalhub.mtn.cmapi, test | Not in the scope | 2026-11-14 |
| dealers-uat-msfyqpu.mtn.cmtest | Not in the scope | 2026-11-14 |
| digitalstatement-uat.mtn.cmtest | Not in the scope | 2026-11-14 |
| dealers-uat-msfyqpu-a.mtn.cmtest | Not in the scope | 2026-11-14 |
| dealers-uat-msfyqpu-b.mtn.cmtest | Not in the scope | 2026-11-14 |
| dealers-uat-msfyqpu-c.mtn.cmtest | Not in the scope | 2026-11-14 |
| dealers-uat-msfyqpu-d.mtn.cmtest | Not in the scope | 2026-11-14 |
| dealers-uat-msfyqpu-e.mtn.cmtest | Not in the scope | 2026-11-14 |
| www.career-portal-test.mtn.cmtest | Not in the scope | 2026-11-14 |
| ers360-test.agentportal.mtn.cmtest | Not in the scope | 2026-11-14 |
| sdchatbot-uat.yellosoft.mtn.cmtest | Not in the scope | 2026-11-14 |
| test.subscriptionmanager.mtn.cmtest | Not in the scope | 2026-11-14 |
| chew-test106l.itcs.nor116-175.mtn.cmtest | Not in the scope | 2026-11-14 |
| mgi-uat.mtn.co.rwtest | Not in the scope | 2026-11-14 |
| mnp-test.mtn.co.rwtest | Not in the scope | 2026-11-14 |
| momo-test.mtn.co.rwtest | Not in the scope | 2026-11-14 |
| mowali-sandbox.mtn.co.rwtest | Not in the scope | 2026-11-14 |
| sandbox.momodeveloper.mtn.co.rwtest | Not in the scope | 2026-11-14 |
| genesys-test.mtn.co.sztest | Not in the scope | 2026-11-14 |
| uat.mtn.co.ugtest | Not in the scope | 2026-11-14 |
| ecw-test.mtn.co.ugtest | Not in the scope | 2026-11-14 |
| dns20-test.mtn.co.ugtest | Not in the scope | 2026-11-14 |
| dns30-test.mtn.co.ugtest | Not in the scope | 2026-11-14 |
| mail20-test.mtn.co.ugmail, test | Not in the scope | 2026-11-14 |
| nagios-test.mtn.co.ugmonitoring, test | Not in the scope | 2026-11-14 |
| demo.mtn.co.zatest | Not in the scope | 2026-11-14 |
| fx-test.mtn.co.zatest | Not in the scope | 2026-11-14 |
| uat.auth.mtn.co.zaauth, test | Not in the scope | 2026-11-14 |
| qa.ebilling.mtn.co.zatest | Not in the scope | 2026-11-14 |
| test-musicplus.mtn.co.zatest | Not in the scope | 2026-11-14 |
| mtndxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| blob.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| help.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| mykente-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| shop.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| uat.auth.za.mtn.comauth, test | Not in the scope | 2026-11-14 |
| ghmtnone-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| ugmtnone-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| config.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| gamifyhub-sit.mtn.comtest | Not in the scope | 2026-11-14 |
| mtn-id.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| mtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| pms-ui.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| profile.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| rewards.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| accounts.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| balances.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| bjmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| bjmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| cgmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| cgmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| cimtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| cimtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| cmmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| cmmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| ghmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| ghmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| products.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| sdmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| sdmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| swmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| swmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| ugmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| ugmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| zmmtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| zmmtnonedxp-uat.mtn.comtest | Not in the scope | 2026-11-14 |
| analytics.sit-my.mtn.comtest | Not in the scope | 2026-11-14 |
| ghamtnonecdn-uat.mtn.comtest | Not in the scope | 2026-11-14 |
28 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.