FirstBlood-#1762 — Leak all the Appointment Id with ambulance enabled
This issue was discovered on FirstBlood v3
On 2022-12-15, mr_xhunt 
Level 8
reported:
Getting started
Learn about vulnerability types 
Getting started in bug bounties 
Test your knowledge
Free Web Application Challenges
BugBountyHunter Membership
Guides for your hunts 
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources 
Disclosed HackerOne Reports 
Our community
Endorsed Members
Hackevents 
Member Articles
Summary:
The /api/ambulances.php is used to view the appointment details by ID but if we send all in the select parameter then all the appointment whose ambulance is enabled IDs are leaked.
Steps To Reproduce:
- Visit the following link and the Appointment Id will be leaked: https://130e40a9ad26-mrxhunt.a.firstbloodhackers.com/api/ambulances.php?select=all
P2 High
Endpoint: /api/ambulances.php
Parameter: select
Payload: all
FirstBlood ID: 71
Vulnerability Type: Information leak/disclosure
The endpoint /api/ambulances.php leaks patient information if the parameter ?select=all is supplied