MAJOR flaw found in vbulletin !! MODS READ THIS NOW

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • The Sex Pusher
    So Fucking Banned
    • Mar 2004
    • 431

    #1

    MAJOR flaw found in vbulletin !! MODS READ THIS NOW

    Ok yet again i have found a major flaw in GFY and in all of the latest versions of vbulletin.

    Simply put , if used properly, it means you can take over anyone's account.

    Anyone who runs vbulletin needs to contact me ASAP ( smokey_the_bearz(AT)mailcity.com ) and look for the latest patch that should be available within the next few days i'm sure ( from vbulletin )...

    There really isn't much to patch with this flaw, it's going to take some rewriting to patch properly.

    GFY still has a few open holes as well besides this new one. " mods/techs you can't just patch the stuff i post , you have to read the previous emails i sent to the mods and lensman with exact details etc etc "


    Now as far as gratitude.

    Should i just be handing out this stuff on a platter for gfy and everyone else with no thanks in return just because i happen to think GFY is quite fun and because im such a nice fellow ??

    Or

    Should i demand godlike status here and get to edit everyone's post at random and make people shove c bills down my stinky drawers to post. !!


    Or

    Should i give the info away to someone who will wreak havoc upon gfy for a few weeks, take mods names and ban everyone else.


    Im all for full exposure/disclosure when flaws like the one i have found exist. I will refrain from posting the details here, only because i think gfy should be given some fair warning ( and because of the whiners , who think everything should be kept hush hush ) , BUT , i will give out full details to (any board) admins who contact me, so the information will be out there fairly soon.

    Need i remind you what i could have done instead.. - Taken an admins name , locked out those who's opinion i don't happen to share. edited some posts to make people look foolish and confused, and generally cause quite a disturbance and confusion amongst the GFY populace..

    Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.
  • mule
    Confirmed User
    • Jan 2002
    • 6085

    #2
    Originally posted by The Sex Pusher
    Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.
    Maybe you'd get more appreciation if you open a fruit stall.
    Converting like a mofo

    Comment

    • The Sex Pusher
      So Fucking Banned
      • Mar 2004
      • 431

      #3
      p.s. this new flaw doesn't have much to do with html being allowed or not , so it affects almost every version of vbulletin.

      Comment

      • toddler
        Confirmed User
        • Jun 2002
        • 1911

        #4
        Originally posted by The Sex Pusher
        Ok yet again i have found a major flaw in GFY and in all of the latest versions of vbulletin.

        Simply put , if used properly, it means you can take over anyone's account.

        Anyone who runs vbulletin needs to contact me ASAP ( smokey_the_bearz(AT)mailcity.com ) and look for the latest patch that should be available within the next few days i'm sure ( from vbulletin )...

        There really isn't much to patch with this flaw, it's going to take some rewriting to patch properly.

        GFY still has a few open holes as well besides this new one. " mods/techs you can't just patch the stuff i post , you have to read the previous emails i sent to the mods and lensman with exact details etc etc "


        Now as far as gratitude.

        Should i just be handing out this stuff on a platter for gfy and everyone else with no thanks in return just because i happen to think GFY is quite fun and because im such a nice fellow ??

        Or

        Should i demand godlike status here and get to edit everyone's post at random and make people shove c bills down my stinky drawers to post. !!


        Or

        Should i give the info away to someone who will wreak havoc upon gfy for a few weeks, take mods names and ban everyone else.


        Im all for full exposure/disclosure when flaws like the one i have found exist. I will refrain from posting the details here, only because i think gfy should be given some fair warning ( and because of the whiners , who think everything should be kept hush hush ) , BUT , i will give out full details to (any board) admins who contact me, so the information will be out there fairly soon.

        Need i remind you what i could have done instead.. - Taken an admins name , locked out those who's opinion i don't happen to share. edited some posts to make people look foolish and confused, and generally cause quite a disturbance and confusion amongst the GFY populace..

        Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.
        how many of these have you found?

        (and why really? you just bored?)
        http://www.flickr.com/photos/zoddler/

        Comment

        • jimboc
          Confirmed User
          • Jun 2002
          • 1614

          #5
          Smokey your full of shit

          Comment

          • montel
            Confirmed User
            • Jul 2001
            • 2606

            #6
            Originally posted by jimboc
            Smokey your full of shit
            make an example of him!
            Barefootsies

            Comment

            • Edguy!
              Confirmed User
              • Mar 2004
              • 1126

              #7
              You'll never have a fully secure code though...

              Plus it is only a message board, using someone's account here the amount of damage that can be done is limited
              porndollar.com

              Comment

              • jimboc
                Confirmed User
                • Jun 2002
                • 1614

                #8
                They will always have a backup to go back to

                Comment

                • jimboc
                  Confirmed User
                  • Jun 2002
                  • 1614

                  #9
                  Originally posted by Edguy!
                  You'll never have a fully secure code though...

                  Plus it is only a message board, using someone's account here the amount of damage that can be done is limited
                  Yeah Smokey the shit, use my account and increace my post count for me

                  Comment

                  • rounders
                    Confirmed User
                    • Sep 2003
                    • 2931

                    #10
                    is this a j0ke?
                    ICQ#: 153923840

                    Comment

                    • =^..^=
                      Confirmed User
                      • Jan 2002
                      • 6935

                      #11
                      Originally posted by Edguy!
                      You'll never have a fully secure code though...

                      Plus it is only a message board, using someone's account here the amount of damage that can be done is limited
                      limited, yes- but limited to what?

                      what if soemone stole the account of some big industry player and made some bogus anouncement that wreaked havoc?

                      there is quite a bit you could do with someone else's account for sure
                      #RememberYourRoots #AaronMForGFYHOF

                      Comment

                      • BadBrad
                        Confirmed User
                        • Feb 2004
                        • 618

                        #12
                        Originally posted by Edguy!
                        You'll never have a fully secure code though...

                        Plus it is only a message board, using someone's account here the amount of damage that can be done is limited
                        Not to mention you fuck with people's livelihood then they send Juicy after you.
                        Your sig chose me!

                        Comment

                        • jimboc
                          Confirmed User
                          • Jun 2002
                          • 1614

                          #13
                          Originally posted by =^..^=


                          limited, yes- but limited to what?

                          what if soemone stole the account of some big industry player and made some bogus anouncement that wreaked havoc?

                          there is quite a bit you could do with someone else's account for sure
                          Don't rise to him, I don't think he can do much, the only stuff he's done before is put html in the img tags

                          He's just desperate to get back in with Lensman etc...

                          Comment

                          • shogun3k
                            Confirmed User
                            • Mar 2004
                            • 480

                            #14
                            lol. bullshiting perhaps?

                            or just some random script-kidde.

                            Comment

                            • AlienQ - BANNED FOR LIFE
                              best designer on GFY
                              • Mar 2003
                              • 30307

                              #15
                              I would wager he found somthing.

                              Comment

                              • Dveron
                                Confirmed User
                                • Dec 2002
                                • 2794

                                #16
                                come up with a fix for the fucking search engine out while you're at it jackass.
                                Adult Comics Club - Updated Bi-Daily. 60% Recurring Payouts. Exclusive Comic Content.

                                Comment

                                • The Sex Pusher
                                  So Fucking Banned
                                  • Mar 2004
                                  • 431

                                  #17
                                  No joke , if the owners dont patch this shit be prepared to see some major fucking around on any board that runs the same script..

                                  To those who dont think it serious.. If you know your shit just email me at address above and i will show you a working example..

                                  Mods- If you give me permission we can setup a dummy account and i will show you how its done. Right before your very eyes..

                                  Just make a restricted admin name and give me the go ahead , and i will take it .

                                  * dveron, I don't think they want helping hands fixing things, they prefer to do it themselves despite the obvious drawbacks.. ( its slower but provides more security )

                                  Comment

                                  • emmanuelle
                                    Confirmed User
                                    • Mar 2003
                                    • 3662

                                    #18
                                    Give him a cookie

                                    Comment

                                    • DR_PHIL
                                      Confirmed User
                                      • Oct 2002
                                      • 4099

                                      #19
                                      disable the search..that fixes all

                                      Comment

                                      • buddyjuf

                                        #20
                                        Originally posted by The Sex Pusher
                                        Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.

                                        Comment

                                        • The Sex Pusher
                                          So Fucking Banned
                                          • Mar 2004
                                          • 431

                                          #21
                                          Originally posted by toddler


                                          how many of these have you found?

                                          (and why really? you just bored?)
                                          how many ? about half a dozen to a dozen that gfy mods patched..

                                          Why ? Because i run a popular non adult board using the same script..

                                          Comment

                                          • The Sex Pusher
                                            So Fucking Banned
                                            • Mar 2004
                                            • 431

                                            #22
                                            Originally posted by DR_PHIL
                                            disable the search..that fixes all
                                            ?? huh ? the search function has nothing to do with it..

                                            Comment

                                            • baddog
                                              So Fucking Banned
                                              • Apr 2001
                                              • 107089

                                              #23
                                              Originally posted by AlienQ
                                              I would wager he found somthing.
                                              hate to admit it, but I agree

                                              Comment

                                              • pornstar2pac
                                                Omaha Hi/Lo
                                                • Nov 2003
                                                • 17380

                                                #24
                                                Originally posted by The Sex Pusher


                                                how many ? about half a dozen to a dozen that gfy mods patched..

                                                Why ? Because i run a popular non adult board using the same script..

                                                I've always liked you Bear. Can you go into Mystery Man account and put me on his ignore list.






                                                thanks..
                                                Trump haters gonna hate. that's all they can do

                                                Comment

                                                • KRL
                                                  Entrepreneur
                                                  • Oct 2002
                                                  • 31429

                                                  #25
                                                  SexPush - Can you figure out how to turn on the Search feature for some of us who won't abuse it?

                                                  That'd be cool.

                                                  Thanks!
                                                  If you would like to develop your domains, you can lease inexpensive foreign labor
                                                  from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION!

                                                  *** *** *** *** *** *** *** *** *** *** *** ***
                                                  Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

                                                  Comment

                                                  • Mr.Fiction
                                                    Confirmed User
                                                    • Feb 2002
                                                    • 9484

                                                    #26
                                                    Originally posted by KRL
                                                    SexPush - Can you figure out how to turn on the Search feature for some of us who won't abuse it?

                                                    That'd be cool.

                                                    Thanks!
                                                    Add security code image?
                                                    Don't be lazy, protect free speech: ACLU | Free Speech Coalition | EFF | IMPA

                                                    Comment

                                                    Working...