IMDb welcomes reports from security researchers and experts about possible security vulnerabilities.
If you believe you have found a security vulnerability on IMDb.com, please review the information here and submit the details of your findings through the web form, including your findings and detailed instructions regarding how to reproduce the issue.
Following the link above, please access the web form under Report a security vulnerability on Amazon Retail services or products. Once in the web form, choose Amazon Subsidiaries in the "Asset" field, and proceed through the steps in the form to report a security issue for IMDb.
Be advised, IMDb does not currently participate in a bug bounty program.
IMDb is an Amazon company, and handles security issues using Amazon's processes.