spontaneous account creation

[Sumaleth]

A reseller on our server today received one of these emails:

Creator Duplicate: Your account for testxx.com is now ready for use.

The email used his 'new account' email template, but he did not create the account, and in fact the account does not exist on the server.

It almost sounds like someone playing with a DA exploit, but even that sounds like a stretch.

Does anyone happen to know how this might have happened?

Rowan.

--
http://www.installatron.com

 

[hostpc.com]

Is the DA API installed?

 

[Sumaleth]

It is installed on our server, yes. We use it for our hosting, but he doesn't use it.

Is it possible to send the creation email using the API without creating an account?

--
http://www.installatron.com