This repository was archived by the owner on Feb 28, 2023. It is now read-only.
This repository was archived by the owner on Feb 28, 2023. It is now read-only.
Authentication not required when accessing some major API endpoints #127
Description
v1/clubs
Summary
This endpoint shows sensitive, internal information about all clubs
Reproduce
curl -X GET https://hackclub.com/v1/clubs
v1/clubs
Summary
Submitting a POST request can alter entries and create entries
Examples
Look at club.id 114,1063,1064
I'll be looking at a bit more later, but these are the most fearing from the bunch.
Credits:
@maxwofford For confirming results
@paked For egging me on (and backing up the db)