Vulnerability in the RPG Module

by Im2Sik October 25th 2007, 2:46 pm

Hi,

I have discovered a Vulnerability in the RPG Module of the Forum.

I have a Forum and someone PM'd me saying that they used a Mod Tool to edit one of the boxes in the RPG Module which i specifically allocated with the permissions

* Cant be edited by User

Therefore once he told me this he showed me proof as he did do it and he wanted to warn me that anyone can do this if they attained this tool.

Therefore i ask Forumotion is there anything that can be done about this.

Thanks for any help Very Happy

by Bad Wolf October 25th 2007, 4:49 pm

oO what Mod Tool did they use ?

by Im2Sik October 26th 2007, 4:33 pm

Forget about the Tool

Im still wondering about what Forumotionj are going to do in terms of the lack of security for the RPG Module

by Guest October 26th 2007, 4:59 pm

This is a problem :S I'll forward this to a technican A.S.A.P

As for obtaining the mod tool Bad Wolf, I wouldn't go down that road if I were you.... Wink

by Im2Sik October 26th 2007, 7:06 pm

I wasn't going to give it to him anyway

Only if one of the Staff ask for it i'll give it.

by Guest October 26th 2007, 7:31 pm

It is merely a hacking tool, you can't stop people developing these things, the forum security will need to be updated if anymore of these cases develop Wink

by Im2Sik October 26th 2007, 8:10 pm

The most funniest thing its not even a Hacking Tool

I dont want to go more iinto it because i dont want anyone else to know

Its one of the easiest things you could ever do thats why im angry

by Bad Wolf October 26th 2007, 8:23 pm

Im2Sik wrote:The most funniest thing its not even a Hacking Tool

I dont want to go more iinto it because i dont want anyone else to know

Its one of the easiest things you could ever do thats why im angry

im a "she" 1st off Razz

and i didnt want it .. i wanted to know what it was to help prevent against it's use on my site.
but if its something like a Perl editor could do... then ya we got a problem

by Soon October 29th 2007, 9:37 am

Hi,
Could you please tell me, what is this tool, or what are you doing to chnage the data without any rights. It will help us to solve the problem.
If you prefer you can send your answer by PM Wink

Thank you