Warning to ALL @ wj.

[SᴩiDᴇЯ]

Does anyone know this person: Milad_ran if you do? delete off your forum and ban he's IP.

Milad_ran
Newbie

Join Date: Nov 2009
Posts: 0
Thanks: 0
Thanked 0 Times in 0 Posts
Milad_ran is an unknown quantity at this point

He joined my forum and asked if he could be a uploader then the next he sent me this:


Hi!!!!
hi mate
now i'm admin in your forum......
please solve this bug quickly.
before some1 fuckes up this forum hahaha.....

He got into the acp and made himself an Admin.

So if you see him DELETE him.

 

[ACiD]

How did he get into ACP in the first place. It's your fault for not securing your site. He PMED you and told the problem, he didn't do no harm right? Your supposed to thank him for that and ask him what that bug was.

 

[SᴩiDᴇЯ]

I had just bought the site from Kholu, he got in the day before we did the handover.

 

[ACiD]

What harm did the uploader do to you?

 

[CyberJ37]

What vB version are you on? Most probably the XSS on memberlist.php

 

[d3monic]

why ban him? he seems like he did you a favor by informing you. he could have done much worse

 

[DeLeTeD]

yea id find out what he did, he was nice enough to inform you

 

[Raven Faust]

Ya he did help you out now to ask him what exploit he used and why not ask him to be part of your security team if he is that good.. Id thank him.

 

[Fatal]

I'd personally thank him (not that I'd leave my forum that insecure..) He did no harm, and let you know that there was an exploit.

PS: Do you have any plans on adding a "guest" section for submitting to katz? :P

Fatal

 

[SᴩiDᴇЯ]

PS: Do you have any plans on adding a "guest" section for submitting to katz?

Fatal

We submit to Katz now and ranked 4*, we don't need guest section.

 

[-Im.z2ight-]

You banned him after he helped you lol.

 

[rko]

lol this is kinda weird

 

[Curtis129]

lol noob

 

[SᴩiDᴇЯ]

What vB version are you on? Most probably the XSS on memberlist.php

it has vBulletin 3.8.1 Patch Level 1

You banned him after he helped you lol.

I like that, he helped me! are you so naive not to ban him?
Firstly he hacked into acp, secondly if he wanted to "HELP" me, don't you think a pm would be good enough, and thirdly he was in acp when i came on the site, so there's no way i was letting him go any further then he already was.

I think that if it happened to you there's way you would say thank you.

This thread was put here to notify ppl about him, not to start a flaming match.

 

[Fatal]

PS: Do you have any plans on adding a "guest" section for submitting to katz?

Fatal

We submit to Katz now and ranked 4*, we don't need guest section.

Okay, well I didn't notice if you submitted any of my downloads :P

Fatal

 

[Mac]

it has vBulletin 3.8.1 Patch Level 1

LOL.

a) Upgrade to a newer version.
b) He was only trying to show you that your site is vulnerable, he didn't do anything bad. You are the douche here.

 

[SᴩiDᴇЯ]

Ya he did help you out now to ask him what exploit he used and why not ask him to be part of your security team if he is that good.. Id thank him.

What like toomanysecrets who destroyed vbskin.info? no thank you, not making that mistake again!!!

 

[Myth?]

It was nice of him to tell you what the bug was.

 

[Ak47]

i lol'd.