i'm proud to announce that someone found an exploit

Posted: Thu Feb 09, 2006 7:34 pm

Finally someone found a nice security exploit in our Dragonfly CMS.
This exploit is so severe since nobody reads what they see on the screen and in the install instructions.
Our installer and documentation states that you must delete install.php after you finished it. But since the human is ignorant, they keep this exploit wide open Very Happy

The exploit was released today and the patch released 8 hours later Very Happy

I'm proud on the person who found it. He took his spare time to find one and profesionaly report it to the community.

The only thing that bugs me is that they never contact the author although its OpenSource. So i'm more proud on the members who take the time and snoop the internet for exploits to report them.

So i wanna thank people like ChatServ, Jeruvy and SteX for their great time they spend to track down the reports.

Sells PC To Pay For Divorce Joined: Posts: 5661

ha......ha......people never say anything maze....you know that !

Posted: Fri Feb 10, 2006 11:48 am

Yeah I saw that on a few hacking pages Smile

I thought that was pretty rare to see killing me