Have a look here:
http://www.desertseek.com/cgi-bin/admin/admin.cgi

They use Links 2.0 but their admin scripts are wide open for abuse.
I warned them just an hour ago, I wonder how long it will take for them to close it...

Patrick

Still open!

I agree but why are you posting it publicly!? Email them, yes. But do not make your point by telling the world. You have just played an intergral role in compromising the security of a website.

Dan

I agree with Dan. A simple note to the sysadmin would have been sufficient. Who's more irresponsible, that negligent webmaster or the "helpful" poster ??

I actually did mail them about 7 hours ago, before that a co-worker of mine did (about a week ago). Never had a reply, never got closed.
I normally wouldn't post something like this, but hey, it might get their attention this time. I just hope they have recent backups.
I'm a sysadmin myself (http://www.advalvas.be, kindof the biggest Belgian portal site) and recieving a mail like I sent, telling exactly what the problem is, where it is, and how to solve it, would make all kind of bells and whistles go off in my mind.

Patrick

And what is the point of posting a message like this publicly??? This type of posting should be removed...Alex?

Also...it is not the sysadmin who has the problem, but the webmaster. Sysadmins maintain physical servers NOT virtual accounts in servers. They are not in charge of developing or administrating "web sites" or "web pages".



Regards,

Eliot Lee