Flags Shop — Price Parameter Tampering

The buy endpoint accepts a ‘costo’ (price) POST parameter from the client. Sending costo=0 purchases the expensive flag item for free.

January 1, 2024 · 1 min · giordii