9
Yesterday we were held hostage by a hacker. Here is what happened.
He registered an account with an anonymous email address. Then he made some posts and logged out.
He was not even logged in and he was able to change user names, edit posts, and strip away admin rights within forums. He was able to edit posts within seconds after they were made. Even in private forums.
What we need to know, is how is this possible? The system was totaly secure so I thought. We had the latest patches installed. How can someone hack our system in such a way?
I am a fairly decent systems guy, and a good student of the game, and I could not figure it out. So any help is greatly appreciated.