If a new vulnerability was found by your investigation, is not a duplicate of an earlier or pending vulnerability, we will credit you here: https://sportsa.com/credits/.
Vulnerabilities are required to be verified as authentic, and not simply automated results of pen-tests.
If you are a security researcher, we request that you follow responsible disclosure best practices. Please avoid looking to compromise any actual user data. Please use your own test accounts, or reach out to the sportsa.com team.
Irresponsible use or disclosure of vulnerability information or confidential data may result in the appropriate sanctions under local and international law.