MAJOR flaw found in vbulletin !! MODS READ THIS NOW - GoFuckYourself.com

The Sex Pusher · 04-02-2004, 01:14 AM

Ok yet again i have found a major flaw in GFY and in all of the latest versions of vbulletin.

Simply put , if used properly, it means you can take over anyone's account.

Anyone who runs vbulletin needs to contact me ASAP ( smokey_the_bearz(AT)mailcity.com ) and look for the latest patch that should be available within the next few days i'm sure ( from vbulletin )...

There really isn't much to patch with this flaw, it's going to take some rewriting to patch properly.

GFY still has a few open holes as well besides this new one. " mods/techs you can't just patch the stuff i post , you have to read the previous emails i sent to the mods and lensman with exact details etc etc "

Now as far as gratitude.

Should i just be handing out this stuff on a platter for gfy and everyone else with no thanks in return just because i happen to think GFY is quite fun and because im such a nice fellow ??

Or

Should i demand godlike status here and get to edit everyone's post at random and make people shove c bills down my stinky drawers to post. !!

Or

Should i give the info away to someone who will wreak havoc upon gfy for a few weeks, take mods names and ban everyone else.

Im all for full exposure/disclosure when flaws like the one i have found exist. I will refrain from posting the details here, only because i think gfy should be given some fair warning ( and because of the whiners , who think everything should be kept hush hush ) , BUT , i will give out full details to (any board) admins who contact me, so the information will be out there fairly soon.

Need i remind you what i could have done instead.. - Taken an admins name , locked out those who's opinion i don't happen to share. edited some posts to make people look foolish and confused, and generally cause quite a disturbance and confusion amongst the GFY populace..

Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.

mule · 04-02-2004, 01:18 AM

Quote:

Originally posted by The Sex Pusher
Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.

Maybe you'd get more appreciation if you open a fruit stall.

The Sex Pusher · 04-02-2004, 01:19 AM

p.s. this new flaw doesn't have much to do with html being allowed or not , so it affects almost every version of vbulletin.

toddler · 04-02-2004, 02:28 AM

Quote:

Originally posted by The Sex Pusher
Ok yet again i have found a major flaw in GFY and in all of the latest versions of vbulletin.

Simply put , if used properly, it means you can take over anyone's account.

Anyone who runs vbulletin needs to contact me ASAP ( smokey_the_bearz(AT)mailcity.com ) and look for the latest patch that should be available within the next few days i'm sure ( from vbulletin )...

There really isn't much to patch with this flaw, it's going to take some rewriting to patch properly.

GFY still has a few open holes as well besides this new one. " mods/techs you can't just patch the stuff i post , you have to read the previous emails i sent to the mods and lensman with exact details etc etc "

Now as far as gratitude.

Should i just be handing out this stuff on a platter for gfy and everyone else with no thanks in return just because i happen to think GFY is quite fun and because im such a nice fellow ??

Or

Should i demand godlike status here and get to edit everyone's post at random and make people shove c bills down my stinky drawers to post. !!

Or

Should i give the info away to someone who will wreak havoc upon gfy for a few weeks, take mods names and ban everyone else.

Im all for full exposure/disclosure when flaws like the one i have found exist. I will refrain from posting the details here, only because i think gfy should be given some fair warning ( and because of the whiners , who think everything should be kept hush hush ) , BUT , i will give out full details to (any board) admins who contact me, so the information will be out there fairly soon.

Need i remind you what i could have done instead.. - Taken an admins name , locked out those who's opinion i don't happen to share. edited some posts to make people look foolish and confused, and generally cause quite a disturbance and confusion amongst the GFY populace..

Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.

how many of these have you found?

(and why really? you just bored?)

jimboc · 04-02-2004, 02:31 AM

Smokey your full of shit

montel · 04-02-2004, 03:18 AM

Quote:

Originally posted by jimboc
Smokey your full of shit

make an example of him!

Edguy! · 04-02-2004, 03:21 AM

You'll never have a fully secure code though...

Plus it is only a message board, using someone's account here the amount of damage that can be done is limited

jimboc · 04-02-2004, 03:23 AM

They will always have a backup to go back to

jimboc · 04-02-2004, 03:25 AM

Quote:

Originally posted by Edguy!
You'll never have a fully secure code though...

Plus it is only a message board, using someone's account here the amount of damage that can be done is limited

Yeah Smokey the shit, use my account and increace my post count for me

rounders · 04-02-2004, 03:25 AM

is this a j0ke?

=^..^= · 04-02-2004, 03:26 AM

Quote:

Originally posted by Edguy!
You'll never have a fully secure code though...

Plus it is only a message board, using someone's account here the amount of damage that can be done is limited

limited, yes- but limited to what?

what if soemone stole the account of some big industry player and made some bogus anouncement that wreaked havoc?

there is quite a bit you could do with someone else's account for sure

BadBrad · 04-02-2004, 03:27 AM

Quote:

Originally posted by Edguy!
You'll never have a fully secure code though...

Plus it is only a message board, using someone's account here the amount of damage that can be done is limited

Not to mention you fuck with people's livelihood then they send Juicy after you.

jimboc · 04-02-2004, 03:29 AM

Quote:

Originally posted by =^..^=

limited, yes- but limited to what?

what if soemone stole the account of some big industry player and made some bogus anouncement that wreaked havoc?

there is quite a bit you could do with someone else's account for sure

Don't rise to him, I don't think he can do much, the only stuff he's done before is put html in the img tags

He's just desperate to get back in with Lensman etc...

shogun3k · 04-02-2004, 03:31 AM

lol. bullshiting perhaps?

or just some random script-kidde.

AlienQ - BANNED FOR LIFE · 04-02-2004, 03:38 AM

I would wager he found somthing.

Dveron · 04-02-2004, 03:40 AM

come up with a fix for the fucking search engine out while you're at it jackass.

The Sex Pusher · 04-03-2004, 04:15 PM

No joke , if the owners dont patch this shit be prepared to see some major fucking around on any board that runs the same script..

To those who dont think it serious.. If you know your shit just email me at address above and i will show you a working example..

Mods- If you give me permission we can setup a dummy account and i will show you how its done. Right before your very eyes..

Just make a restricted admin name and give me the go ahead , and i will take it .

* dveron, I don't think they want helping hands fixing things, they prefer to do it themselves despite the obvious drawbacks.. ( its slower but provides more security )

emmanuelle · 04-03-2004, 04:20 PM

Give him a cookie

DR_PHIL · 04-03-2004, 04:22 PM

disable the search..that fixes all

04-03-2004, 04:22 PM

Quote:

Originally posted by The Sex Pusher
Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.

The Sex Pusher · 04-03-2004, 04:23 PM

Quote:

Originally posted by toddler

how many of these have you found?

(and why really? you just bored?)

how many ? about half a dozen to a dozen that gfy mods patched..

Why ? Because i run a popular non adult board using the same script..

The Sex Pusher · 04-03-2004, 04:26 PM

Quote:

Originally posted by DR_PHIL
disable the search..that fixes all

?? huh ? the search function has nothing to do with it..

baddog · 04-03-2004, 04:28 PM

Quote:

Originally posted by AlienQ
I would wager he found somthing.

hate to admit it, but I agree

pornstar2pac · 04-03-2004, 04:58 PM

Quote:

Originally posted by The Sex Pusher

how many ? about half a dozen to a dozen that gfy mods patched..

Why ? Because i run a popular non adult board using the same script..

I've always liked you Bear. Can you go into Mystery Man account and put me on his ignore list.

thanks..

KRL · 04-03-2004, 05:18 PM

SexPush - Can you figure out how to turn on the Search feature for some of us who won't abuse it?

That'd be cool.

Thanks!

Mr.Fiction · 04-03-2004, 06:03 PM

Quote:

Originally posted by KRL
SexPush - Can you figure out how to turn on the Search feature for some of us who won't abuse it?

That'd be cool.

Thanks!

Add security code image?

04-02-2004, 01:14 AM	#1
The Sex Pusher So Fucking Banned Join Date: Mar 2004 Posts: 431	MAJOR flaw found in vbulletin !! MODS READ THIS NOW Ok yet again i have found a major flaw in GFY and in all of the latest versions of vbulletin. Simply put , if used properly, it means you can take over anyone's account. Anyone who runs vbulletin needs to contact me ASAP ( smokey_the_bearz(AT)mailcity.com ) and look for the latest patch that should be available within the next few days i'm sure ( from vbulletin )... There really isn't much to patch with this flaw, it's going to take some rewriting to patch properly. GFY still has a few open holes as well besides this new one. " mods/techs you can't just patch the stuff i post , you have to read the previous emails i sent to the mods and lensman with exact details etc etc " Now as far as gratitude. Should i just be handing out this stuff on a platter for gfy and everyone else with no thanks in return just because i happen to think GFY is quite fun and because im such a nice fellow ?? Or Should i demand godlike status here and get to edit everyone's post at random and make people shove c bills down my stinky drawers to post. !! Or Should i give the info away to someone who will wreak havoc upon gfy for a few weeks, take mods names and ban everyone else. Im all for full exposure/disclosure when flaws like the one i have found exist. I will refrain from posting the details here, only because i think gfy should be given some fair warning ( and because of the whiners , who think everything should be kept hush hush ) , BUT , i will give out full details to (any board) admins who contact me, so the information will be out there fairly soon. Need i remind you what i could have done instead.. - Taken an admins name , locked out those who's opinion i don't happen to share. edited some posts to make people look foolish and confused, and generally cause quite a disturbance and confusion amongst the GFY populace.. Mods- to sum it up , I told you about bad fruit, so you ignored it, so i showed you a bad apple and you threw it away, so i showed you a bad orange and you threw that away , so i showed you a bad banana and you threw that way .. - point,, look at the fruit closer.

04-02-2004, 02:31 AM	#5
jimboc Confirmed User Join Date: Jun 2002 Location: Internet of course Posts: 1,614	Smokey your full of shit __________________

04-02-2004, 03:21 AM	#7
Edguy! Confirmed User Join Date: Mar 2004 Posts: 1,126	You'll never have a fully secure code though... Plus it is only a message board, using someone's account here the amount of damage that can be done is limited __________________ porndollar.com

04-02-2004, 03:23 AM	#8
jimboc Confirmed User Join Date: Jun 2002 Location: Internet of course Posts: 1,614	They will always have a backup to go back to __________________

04-02-2004, 03:25 AM	#10
rounders Confirmed User Join Date: Sep 2003 Location: p0rn0stars & h0es Posts: 2,931	is this a j0ke? __________________ ICQ#: 153923840

04-02-2004, 01:19 AM	#3
The Sex Pusher So Fucking Banned Join Date: Mar 2004 Posts: 431	p.s. this new flaw doesn't have much to do with html being allowed or not , so it affects almost every version of vbulletin.

04-02-2004, 03:31 AM	#14
shogun3k Confirmed User Join Date: Mar 2004 Posts: 480	lol. bullshiting perhaps? or just some random script-kidde. __________________

04-02-2004, 03:38 AM	#15
AlienQ - BANNED FOR LIFE best designer on GFY Join Date: Mar 2003 Location: IALIEN.COM - High Definition Video and Photographic Productions -ICQ 78943384 Posts: 30,307	I would wager he found somthing. __________________ NAKED HOSTING FTW!11 I'm On The INSANE PLAN $9.95/mo! \| The Alien Blog Adult News Worth Reading Updated Daily \| Content For Sale! 641 PICS 216 MINUTES OF VIDEO $350.00 \|ICQ: 78943384 \|

04-02-2004, 03:40 AM	#16
Dveron Confirmed User Join Date: Dec 2002 Location: Vancouver Posts: 2,794	come up with a fix for the fucking search engine out while you're at it jackass. __________________ Adult Comics Club - Updated Bi-Daily. 60% Recurring Payouts. Exclusive Comic Content.

04-03-2004, 04:15 PM	#17
The Sex Pusher So Fucking Banned Join Date: Mar 2004 Posts: 431	No joke , if the owners dont patch this shit be prepared to see some major fucking around on any board that runs the same script.. To those who dont think it serious.. If you know your shit just email me at address above and i will show you a working example.. Mods- If you give me permission we can setup a dummy account and i will show you how its done. Right before your very eyes.. Just make a restricted admin name and give me the go ahead , and i will take it . * dveron, I don't think they want helping hands fixing things, they prefer to do it themselves despite the obvious drawbacks.. ( its slower but provides more security )

04-03-2004, 04:20 PM	#18
emmanuelle Confirmed User Join Date: Mar 2003 Location: Oh Canada! Posts: 3,662	Give him a cookie

04-03-2004, 04:22 PM	#19
DR_PHIL Confirmed User Join Date: Oct 2002 Location: Never visits the same thread twice Posts: 4,099	disable the search..that fixes all

04-03-2004, 05:18 PM	#25
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	SexPush - Can you figure out how to turn on the Search feature for some of us who won't abuse it? That'd be cool. Thanks! __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains