I was running IPB on my computer last night and found a way that a hacker could get into your members accounts. I opened Macromedia Flash 8 and made a 1X1 flash animation that after 60 seconds redirects to a website. This animation could be placed in the persons avatar in IPB. After 60 seconds it redirected me to my fake login page for my forum with a message saying your sesson timed out. I tryed it on my brother and he fell for it! I recommend you disable this feature in IPB.
Retired Staff
what? Realy they can get in somone's account that simple. Funny how you stumbled apon that, Or were you actuly testing it?Originally Posted by DesertWar
Last edited by Phil; 09-26-2005 at 09:53 PM.
I stumpled on it I was making a lame flash animation and saw that you could redirect it! If you dont look at the address bar I bet tons of people would fall for it.
Retired Staff
Thats actuley pritty kool. how you stumbled apon that is sweet to! haha
x10Hosting Member
Damn, thx for the inform i use IPB on another one of my sites,i didnt know that i gotta tell my freind.
Here is a photo of what to do turn Flash to off. This is under Security.
x10 Lieutenant
nice finding on this the best excellent discovery I have read thanks a lot for the information.
I will make sure in future if I were to use IPB will take note of this. :drool:
x10 Elder
What you are doing is called pharming (The spelling is right)
Another is thing you can do if you use firefox is add the script blocker NoScript
All you do is select the sites you wish to have JavaScript/Flash/Java Applets run the rest it will block.
Last edited by Richard; 09-27-2005 at 12:18 PM.
sourcewave.net -- Linux is like a teepee, no Windows, no Gates, Apache inside.
Posting Permissions
LinkBack URL
About LinkBacks
Reply With Quote