lowcostvitamins.net

hi,

i don't know who's store this is or what's going on, but anyone can log into there admin via this link which is on the web! (came up in a google search).

http://www.lowcostvitamins.net/admin/mail.php?origin=customers.php&mode=NONSSL&selected_box=tools&customer=ihorse43##########################&cID=10720&zenAdminID=dfc2700e396263aa1069299db9fe5be2

i don't know if this is a hole that is being exploited or somehow they inadvertently posted their admin login on the internet but could someone from zc admin contact them immediately with a fix.

cheers,
jason

We have no relationship with them. There is no software "fix". They just need to stop posting such links to their admin on sites that are indexed by google and others.

If you want to be a good samaritan and point out that they've posted a dangerous link (ie: with zenAdminID in the URL) on the Internet, I recommend using their Contact Us page and telling them about it. Be sure to include the URL where you found their link listed, ie: the google search query etc, so they can attempt to have it delisted.

done. hope they take care of it.