[Benjamin Franklin]

You know they can always use your email instead of the username...

That has modded characters as well.

[420 Blaze It]

Thanks for the notice, looks like I was right on this issue. Hope this is fixed ASAP, wish you well Omni!

[what is life]

Thank you for the heads up!

Saw some Skype messages on this

['An0ny]

You know they can always use your email instead of the username...

Ends up requiring them to have hes mail - which I doubt.

[Programming]

If anyone downloads shit they aren't 100% sure is legit; they deserve to have their accounts taken.

[Simply™]

You know they can always use your email instead of the username...

Some people might no know that though

[cyberducky]

Thanks for the heads up Omni. I am confident HF will be fine like always.

[h4xer]

Thanks for the heads up, omniscient

[Tony Stark]

It's sad knowing how many people won't even be able to follow those 3 simple steps.

Cheers for the update.

[Blazin]

Thanks for the update, finding bugs is always critical.

[Omniscient]

HF members are always being targeted.

Yes, because HF accounts are valued.

I'll defiantly not open links, hopefully booters dosen't use this exploit.. that would be bad lol

There is no exploit. That's the point of this thread. In the near future I'm expecting rumors that one exists when in-fact it doesn't.

The bug is more like saying your car can explode if you throw a molotov cocktail at it. Simply don't throw the molotov cocktail at your car if you want to stay safe. Pretty basic really.

[Noire Dragon]

Yes, because HF accounts are valued.

There is no exploit. That's the point of this thread. In the near future I'm expecting rumors that one exists when in-fact it doesn't.

The bug is more like saying your car can explode if you throw a molotov cocktail at it. Simply don't throw the molotov cocktail at your car if you want to stay safe. Pretty basic really.

Oh aren't you cute, I was looking for XSRF/XSS vulnerabilities on my test mybb installation..seems like a common sense "exploit" alert thread. 😵

[Sceptical]

Thanks for this great heads up news Omni this should help me keep my account for a long time.

[T3h Hack3r]

Do you intend to offer an incentive to those that report valid high risk issues on Hackforums within the near future?

[Krew]

I thought the MyBB CSRF vulns were all fixed upon the implentation of postkeys?