Comment Comment by uxcn my immediate thought is that they're passing raw userdata into the database as stringsThat was my first thought too. I'd guess that it's a vulnerability somewhere in the code for handling the forums.I would be willing to bet that they could get rid of a lot of the attack surface just by using standard services for certain things. parent uxcn 11 years ago
That was my first thought too. I'd guess that it's a vulnerability somewhere in the code for handling the forums.
I would be willing to bet that they could get rid of a lot of the attack surface just by using standard services for certain things.