Fork me on GitHub
Current releases are 2.1.1 (2 Aug 2014) and 2.0.18.13 (5 Aug 2014)
Ready for 2.1? Find out if your favorite plugins are compatible.
The 2.0 branch will no longer receive updates after Dec 2014.

Admin only category can easily be hacked ?

edited February 2012 in Vanilla 2.0 Help

We have a forum with an admin only category. We have found that there is a serious bu in the security. Navigate to an admin account http://www.ourforum.nl/index.php?p=/profile/11/ADMINUSER then click on comments of the adminuser (http://www.ourforum.nl/index.php?p=/profile/comments/11/ADMINUSER) and then one can read the first part of the admin only category comments.

Can anyone confirm this ?

Answers

Sign In or Register to comment.