PDA

View Full Version : security bug again



dxb
Thu 12th Apr '01, 5:13pm
I'm having the same bug in this thread which is an old cookie bug

http://vbulletin.com/forum/showthread.php?s=&threadid=13332


I had this problem with more than 7 users till now and it is a serios security bug


I'm using beta 5

John
Thu 12th Apr '01, 6:24pm
Have these users actually been able to post as another user, or do they just see the odd page as other people?

The reason that I ask this is that I sometimes have pages that look like I am logged in as another user - sometimes to several pages deep into vBulletin, but in the end it just turns out that it's a web cache between my dial-up and the destination server - usually in my ISP somewhere.

John

dxb
Fri 13th Apr '01, 6:48am
I had one of the users being able to enter the other name's profile file but when they tried to post using that name it asked them to enter the name and the password this one of the reports that I got I will see the other users and will let you know

thanks again