Colwyn
11-01-2006, 06:39 AM
Horizons: Empire of Istaria Clent Vulnerability on MMORPG.com (http://mmorpg.com/gamelist.cfm/loadNews/6529/HorizonsClientVulnerabilityReport.html)
Horizons uses a SOAP API to interchange data/commands between the Application Server and several Clients. The API doesn't verify the source which does trigger functions, which opens up multiple abuse possibilities.
A vulnerability has been discovered in the Horizons SOAP API that allows an
attacker to modify account and character information.
via MMORPG.com (http://www.mmorpg.com/)
Horizons uses a SOAP API to interchange data/commands between the Application Server and several Clients. The API doesn't verify the source which does trigger functions, which opens up multiple abuse possibilities.
A vulnerability has been discovered in the Horizons SOAP API that allows an
attacker to modify account and character information.
via MMORPG.com (http://www.mmorpg.com/)