Hi! It's my first blogpost this year. It's about how a huge travel portal's customer PII data could've leaked through some remanant functionality. This led me to discover a few IDORs.

Thanks.