ghasedak
Nov 9 2004, 05:37 PM
Hello
e1servers.net is one of the site that provide low price domains. (6.49$ per domian)
but recently I find there is security problem in the domain control panel.
when You register your first domain in this site , that make a profile for you and the next time you can use this for registering other domains.
you can access all of domains in one control panel.
also you can create a sub user for each domains with diferent username and pass!!!
the bug is here:
when a sub user change the admin email in his/here domain profile and click on "forgot password" link on the site, ev1servers send to him the main user&password to his/here email!!!! (notice they send the admin pass, it is not the subuser pass)
so any sub users have changing his/here domain admin email access can hack you very easy.
becarefull
exp0sed
Aug 9 2005, 03:35 AM
sounds like you should notify ev1servers. id ask em for a reward

-exp0sed