The exploit goes as the following
In the FloAuctions configuration please deny "sealed-auctions".
Thanks, and keep your servers safe.
Many servers still have this flaw and I can always just ruin the economy in around 5 minutes if staff dont catch onto what im doing.
- A user joins a server with FloAuction
- The user starts a silent auction "/sauc start 1 1 100 25"
- The users has an alt account join
- The alt bids 1$
- The alt then bids 999999999$(The Alt Does Not Have This Much)
- The alt is denied with a message saying he does not have a sufficient balance
- The alt re-executes the command one more time
- Success
In the FloAuctions configuration please deny "sealed-auctions".
Thanks, and keep your servers safe.
Many servers still have this flaw and I can always just ruin the economy in around 5 minutes if staff dont catch onto what im doing.
