Web Hosting Talk







View Full Version : A security flaw?


Artashes
07-19-2009, 02:16 PM
Not sure how its possible.

After WHT was hacked, I changed my password, but managed to forget it. So I just tried resetting the password to access the forum and when requested, I received 2 emails for 2 different accounts here! I don't remember to EVER creating another account on WHT, so I am not sure how it arrived to an email address registered with my username account. PS: If I were to move forward, it was totally possible to reset the password for that second account and take ownership of that company's account.

I remember I have reset passwords before, but I have never received emails for other people's accounts.

Is it possible that somehow an email table corruption could have caused this?

writespeak
07-19-2009, 02:27 PM
I don't remember to EVER creating another account on WHT
I don't remember everything from 7 years ago either. :look:

I did a search for your email address in the WHT database, and it was also used for an account that was created in 2002 and never posted with.

I am not sure how it arrived to an email address registered with my username account
When members do password requests and have more than one account with the same email address, the password reminder will arrive for both accounts.

I remember I have reset passwords before, but I have never received emails for other people's accounts.
And it appears that you still haven't. :angel:

Everything looks fine at this end. If you'd like particulars about that old account, please open a helpdesk ticket.

Thanks,
Lois