Jul 14, 2023, 05:39 AM
When we update a thread we'll get a new URL (only if we changed it's subject). But the old URL remains there and never gets deleted from the database. It points to the same thread. So now, a single thread will have multiple URLs.
This can be misused by anyone, by updating their threads few times (means changing the subject) and grabbing all that URLs which points to their threads, kinda spamming. It might be a plugin error...
I suggest changing the threads URL from to It can also fix any other vulnerabilities, because symbols like '$' can be used in subject and is been displayed in the URL.
I hope this issues will be fixed soon... because many will try to exploit it after seeing this post.
BTW the old URLs can be taken by anyone, by posting using the same subject.
This can be misused by anyone, by updating their threads few times (means changing the subject) and grabbing all that URLs which points to their threads, kinda spamming. It might be a plugin error...
I suggest changing the threads URL from
https://breachforums.bf/Thread-Subject_Namehttps://breachforums.bf/showthread.php?pid=Thread_IDI hope this issues will be fixed soon... because many will try to exploit it after seeing this post.
BTW the old URLs can be taken by anyone, by posting using the same subject.