Newest hackmethod - fail by joymax..

borat2 · **Posted:** Fri Jan 30, 2009 10:24 pm

malika69 wrote:

i have posted a request about italian traduction on website ...

i dont have post my acc and pw ? but why i feel bad, i can be hacked ?

i dont understand ^^

You are completely safe the whole topic title is misleading, anyone that is dumb enough to give the id/password to a company that own your whole char is stupid.
I personally don`t consider this as a big deal only thing is this does shows how joymax is failing again and probably gonna blame us as usual.

ThiefzV2 · **Joined:** Jan 2007 **Posts:** 566 **Location:**

I sense a coverup comin'

-.- · **Posted:** Fri Jan 30, 2009 10:50 pm

i sense this is a joymax's way to pass time as a joke.. look at the url, its a demo

edit: hope they log ip reading emails and ban them lol

Tian_Qiang · **Joined:** Jan 2008 **Posts:** 118 **Location:** San Juan

Razorhead wrote:

New Joymax Website exploit:
http://supportcp.joymax.com/demo/mail/e ... ardAll.jsp

DO NOT SEND SUPPORT MESSAGE THAT HAVE ACCOUNT NAME AND PASSWORD TO JOYMAX!!!

All the post are public and if you look at rev6 forum, the exploit was found like this: pic1 , pic2. Basically if you send them a message using your account that has a premium, you can from there browse from their website to the admin mailbox without any password with only 3 mouse clicks. Enter any username and password you want, they are all valid...
They better fix it soon, I don't even want to contact Joymax knowing that everyone can view everything...
This is another huge FAILED! for Joymax -_-
Credit goes to _TANGUITO_ for posting it on rev6 forum.

Joymax NEED to fix it as soon as possible before another exploit come out of it (sql injection, cross site scripting exploit etc...)

man JOYMAX =FAIL

hapnz · **Posted:** Fri Jan 30, 2009 11:07 pm

OTG wrote:

xKingpinx wrote:

Q&A option is no longer there? fixed it maybe?

I noticed that. Maybe they did.

they didn't. yet.

OTG · **Joined:** Oct 2008 **Posts:** 1060 **Location:**

hapnz wrote:

OTG wrote:

xKingpinx wrote:

Q&A option is no longer there? fixed it maybe?

I noticed that. Maybe they did.

they didn't. yet.

Weird. It shows otherwise on my computer. What internet browser you using?

hapnz · **Posted:** Fri Jan 30, 2009 11:20 pm

OTG wrote:

Weird. It shows otherwise on my computer. What internet browser you using?

ff3

maybe it was down for a while earlier.

Ragnorak · **Joined:** Apr 2007 **Posts:** 1147 **Location:**

Tian_Qiang wrote:

Razorhead wrote:

New Joymax Website exploit:
http://supportcp.joymax.com/demo/mail/e ... ardAll.jsp

DO NOT SEND SUPPORT MESSAGE THAT HAVE ACCOUNT NAME AND PASSWORD TO JOYMAX!!!

All the post are public and if you look at rev6 forum, the exploit was found like this: pic1 , pic2. Basically if you send them a message using your account that has a premium, you can from there browse from their website to the admin mailbox without any password with only 3 mouse clicks. Enter any username and password you want, they are all valid...
They better fix it soon, I don't even want to contact Joymax knowing that everyone can view everything...
This is another huge FAILED! for Joymax -_-
Credit goes to _TANGUITO_ for posting it on rev6 forum.

Joymax NEED to fix it as soon as possible before another exploit come out of it (sql injection, cross site scripting exploit etc...)

man JOYMAX =FAIL

LOL

before I actually read this post I actually use
(ID)Joymax
(PW)Fail

to log in.

RedBlueGreen · **Joined:** Nov 2008 **Posts:** 772 **Location:** England

Ragnorak wrote:

Tian_Qiang wrote:

Razorhead wrote:

New Joymax Website exploit:
http://supportcp.joymax.com/demo/mail/e ... ardAll.jsp

DO NOT SEND SUPPORT MESSAGE THAT HAVE ACCOUNT NAME AND PASSWORD TO JOYMAX!!!

All the post are public and if you look at rev6 forum, the exploit was found like this: pic1 , pic2. Basically if you send them a message using your account that has a premium, you can from there browse from their website to the admin mailbox without any password with only 3 mouse clicks. Enter any username and password you want, they are all valid...
They better fix it soon, I don't even want to contact Joymax knowing that everyone can view everything...
This is another huge FAILED! for Joymax -_-
Credit goes to _TANGUITO_ for posting it on rev6 forum.

Joymax NEED to fix it as soon as possible before another exploit come out of it (sql injection, cross site scripting exploit etc...)

man JOYMAX =FAIL

LOL

before I actually read this post I actually use
(ID)Joymax
(PW)Fail

to log in.

i use
ID:4h2egvfqdcsx
pass:t398yhger
-.-

Foss · **Joined:** Feb 2006 **Posts:** 346 **Location:**

Well looks like they fixed it. Page doesnt exist anymore.

Toshiharu · **Joined:** Feb 2008 **Posts:** 4222 **Location:** Nowhere

Yeah they did, but TBH either way you shouldn't be 'hacked' by this. Why? You're never supposed to give Joymax your password and/or secret answer. If you did.. LOL @ YOU. kthxbai

Foss · **Joined:** Feb 2006 **Posts:** 346 **Location:**

Toshiharu wrote:

Yeah they did, but TBH either way you shouldn't be 'hacked' by this. Why? You're never supposed to give Joymax your password and/or secret answer. If you did.. LOL @ YOU. kthxbai

True. I doubt theres gona be any rollbacks. I went through a few pages on there and i didnt see anything that looked "Damaging".

Kinda interesting though. Now we know how many of those support tickets they actually respond to :roll:

iSinnnn · **Posted:** Sat Jan 31, 2009 4:27 am

Fail by anyone who was stupid enough to dish out their password.

Foss · **Joined:** Feb 2006 **Posts:** 346 **Location:**

So how long was it like that anyways?

Amarisa · **Joined:** Feb 2008 **Posts:** 4049 **Location:** Magic

i only sent joymax a message once and it was on a differnt account and that was to ban a botter XD he was rude to me after i gave him to sos i was borrowing lol. yes they did end up banning him hehe (way before euro)

malika69 · **Joined:** Mar 2007 **Posts:** 442 **Location:**

thx borat

Fixed

OTG · **Joined:** Oct 2008 **Posts:** 1060 **Location:**

hapnz wrote:

OTG wrote:

Weird. It shows otherwise on my computer. What internet browser you using?

ff3

maybe it was down for a while earlier.

Still doesn't show for me. I'm using I.E. the newest version of it. :roll:

BalkanFanaticS · **Joined:** Nov 2007 **Posts:** 768 **Location:**

OTG wrote:

hapnz wrote:

OTG wrote:

Weird. It shows otherwise on my computer. What internet browser you using?

ff3

maybe it was down for a while earlier.

Still doesn't show for me. I'm using I.E. the newest version of it. :roll:

ye me too ff3 , i think(hope) its fixed now

hapnz · **Posted:** Sat Jan 31, 2009 1:39 pm

yeah it's been fixed.

Razorhead · **Joined:** Apr 2008 **Posts:** 820 **Location:**

Yeah, they fixed it.
Renamed/Removed page.

Can now be closed

ImmortalKiller · **Joined:** Aug 2008 **Posts:** 675 **Location:** VA/CA

Meh I'm glad this is over with... /facepalms

LOL it really isn't, they just made it very hard for anyone to do it. If you have the willpower and the knowhow, you can still do it...

SwordCloud · **Posted:** Sat Jan 31, 2009 4:47 pm

ImmortalKiller wrote:

Meh I'm glad this is over with... /facepalms

LOL it really isn't, they just made it very hard for anyone to do it. If you have the willpower and the knowhow, you can still do it...

Gratz they just hide a way,still other way left.
Try again failmax.

Rival · **Joined:** Sep 2008 **Posts:** 382 **Location:** BlackBird

SwordCloud · **Posted:** Sat Jan 31, 2009 4:55 pm

But this time you need reald ID and PASS

JOYMAX WIN!

btw what the fck is this image <.<

Rival · **Joined:** Sep 2008 **Posts:** 382 **Location:** BlackBird

Its a Lukasenka

Foss · **Joined:** Feb 2006 **Posts:** 346 **Location:**

So you can still get to the login page? O_o

Just gives me page cannot be found.

Rival wrote:

Its a Lukasenka

Silkroad Online Forums

Newest hackmethod - fail by joymax..

Who is online