Another community's website turns out to be highly vulnerable

Dec 14, 2011 15:11 GMT  ·  By

Around 15,000 account details belonging to the members of the Seven Sins gaming news website (se7ensins.com) were published in a Pastebin document by a hacker that calls himself NOTJESTER.

The leaked information contains usernames, passwords and email addresses allegedly found in a log file dated June 2010.

“Plenty of these email/password combinations will work, but any active forum members had a forced password change. ~15000 users logged while 7S was rooted for a few months,” said the hacker.

He also gives the individuals who want it the option to have their details removed from the log.

As usual, since there are clear-text passwords involved, I’m not going to post a link to the file, but I advise members of the Seven Sins community to change their passwords on all their accounts that share the same log-in credentials.