3 weeks ago, I sent an email about some small but effective vulnerabilities in Travian online game to its providers. By using these vulnerabilities a player can make several accounts by the same email address (because of a logical flaw), and also, he/she can login to other players’ accounts (by using an XSS vulnerability which is completely proved).
Now, I’m still waiting for their final response as I don’t want to be harmful for them!
If you enjoyed this article, please consider sharing it!
Twitter
LinkedIn
[...] These issues go back to June 2009. Related Link: http://soroush.secproject.com/blog/2009/11/travian-game-vulnerabilities-in-progress/ [...]