TrinityCore/TrinityCore — Issue #3544: [Core] Exploit to login accounts and manipulate the auth database
Author: devilcoredev
Created: 2011-10-16 21:47:12+00:00
State: open

There is an exploit that allows accounts to log in without knowing your login and an exploit (maybe the same) that allow to execute query on the realm db (for ex. delete gm account). At the moment our database are under a firewall, so we rule out that the problem becomes by mysql. We are investigating the origin of the problem (no results yet) and hope for your help because if the problem stemmed from the emu would have high priority.