Other user edit someone elses Profile

[robertd62]

I was notified that a user had gone in and edited my personal profile on cartpauj.com this morning. upon looking at my profile I was there were 4 post that I had edited my profile withen the past 6 hours and I had notbeen to the site during that time peroid.

[cartpauj]

Robert, can you provide any details about how the user was able to do this?

[robertd62]

I asked him but he ghasnot replied to it since. there were 4
different items on my profilethat said i had updated my profile but I
wasnot there during that time span. I should have copied them for you
but was poissed and deleted them, nothing was changed though., SO I
cannot really say if it was done or not..

Robert

On Wed, Dec 21, 2011 at 9:16 PM, Paul
reply@reply.github.com
wrote:

Robert, can you provide any details about how the user was able to do this?

---

Reply to this email directly or view it on GitHub:
#13 (comment)

[robertd62]

Got this back form is this morning:

Hi, sorry I was rushing yesterday so never really read correctly.

Using Firefox with firebug I was able to change the mingle_userid on the html forms when creating a comment. As you can see I commented on ronny’s post as if I were you.

The same thing when updating my profile, all I do is change the user_id before clicking update.

I hope that makes sense to you, please ask if you need more explanation.

-----Original Message-----
From: Paul [mailto:reply@reply.github.com]
Sent: Wednesday, December 21, 2011 9:17 PM
To: Robert Dempsey
Subject: Re: [mingle] Other user edit someone elses Profile (#13)

Robert, can you provide any details about how the user was able to do this?

---

Reply to this email directly or view it on GitHub:
#13 (comment)