View Thread

HellBound Hackers | Computer General | Increasing Security

Page 2 of 2

Author

RE: help with website security.....

alldatizholy
Member

Posts: 41
Location: Colorado Springs, CO
Joined: 11.06.07
Rank: HBH Guru
Warn Level: 5

Posted on 19-08-08 23:49

i finally fixed it....he was using my admin cookies.....thnx everyone for helping out, i can finally get my site going....

Author

hacker2k
Member

Posts: 126
Location:
Joined: 11.07.07
Rank: Active User

Posted on 20-08-08 00:02

alldatizholy wrote:
i finally fixed it....he was using my admin cookies.....thnx everyone for helping out, i can finally get my site going....

If he was using your admin cookies, you have a vulnerability so that he could get your cookies. Check your site for XSS vulnerabilities.

Author

alldatizholy
Member

Posts: 41
Location: Colorado Springs, CO
Joined: 11.06.07
Rank: HBH Guru
Warn Level: 5

Posted on 23-08-08 02:24

thats what i did....thats how i found out...

Author

Posts: 856
Location: /var/log/messages
Joined: 30.12.04
Rank: God

Posted on 23-08-08 02:38

alldatizholy wrote:
i finally fixed it....he was using my admin cookies.....thnx everyone for helping out, i can finally get my site going....

In admin actions, is everything tokenized?
Otherwise he could use a different vulnerability to execute admin actions.

Page 2 of 2