QRZ.com user administration escalation

[IZ0IEN]

A very weak security check on QRZ.com permit to anyone to be admin of any callsign on QRZ.com

Administrators are advised by email. At the moment, users can't do anything to mitigate or block the vulnerability.

Further details after the acknowledgement and the fix by QRZ.com administrators.

Regards,
Cris IZ0IEN

[IZ0IEN]

Re: QRZ.com user administration escalation

Further details after the acknowledgement and the fix by QRZ.com administrators.

Regards,
Cris IZ0IEN

Fred Lloyd, AA7BQ, replied to my email. I agree with him that is not a real security issue: no sensitive data can be stolen. But, the issue exist.
In the meanwhile, i proposed a possible solution. Fred is the admin and founder, so is up to him to considerate or not my words.

Reading the kind and respectful email of Fred, i decide that the issue will not detailed by me to the general public.

Cristiano IZ0IEN