Gesior2012 and MyAAC bug - release 2022-04-26 at 21:00 CET

[theduck]

I didn't find these lines in this gesior https://github.com/opentibiabr/gesior-aac/blob/main/pages/guilds.php

 

[Methxs]

thanks for the fix! A few weeks ago a person came in who asked me for money in exchange for this, he obtained access to a GOD account and he eliminated all the players from the server

 

[alcapone]

thanks for the fix! A few weeks ago a person came in who asked me for money in exchange for this, he obtained access to a GOD account and he eliminated all the players from the server

I don't think this was done with this bug

 

[Joker Man]

some one can get in my ots points 99999 how i can fix it

 

[Gesior.pl]

some one can get in my ots points 99999 how i can fix it

Not related.

This bug only allows hacker to move player from one guild to another.
Nobody ever reported bug in Gesior2012 that allows anyone to add points or execute SQL / execute own PHP code.
IDK how about MyAAC. There is no 'admin panel' in official Gesior2012.

 

[Joker Man]

check other post look my website what he can do -100000 points / i do that but he still hacked