Security Breach! WARNING!!!

Posts 1–2 of 2 · Page 1 of 1

I was on mpgh.net and wanted to test the security level there...
None ! :/
When you login, your password and login are CLEARLY VISIBLE AND READABLE !!!!

You can try it if you want on my account. (Change my password and I'll hack you :P)
the %23 means it's a #.
Warning, do not forget the last 8 near the &.
I HARDLY recommend to mpgh to correct this breach.
Best regards

PS:See image down.

You must be retarded or using a crappy browser because only the MD5 hash of the password is sent to the server via HTTP POST. I checked myself.

Code:

vb_login_username=master131&vb_login_password=&vb_login_password_hint=Password&s=&securitytoken=guest&do=login&vb_login_md5password=<md5 hash>&vb_login_md5password_utf=<md5 hash>