#api

IDOR on Tüketici Hakem Heyeti: National ID and Personal Data Exposure

An IDOR vulnerability I discovered in the Tüketici Hakem Heyeti (TÜBİS) system: by manipulating a single parameter, I could access the national ID number, full name, and surname of any citizen and modify their contact information.