My Drupal account has been hacked

May you report the email address that you used when you create your account? If you prefer, you can send it to me using my contact tab.

I double checked {users}.init and confirmed that 'locall127001@yahoo.com' was the original e-mail used to create the account.

@esmailzadeh: You should now be able to use the 'Request new password' at http://drupal.org/user. Also make sure to not use your old password and change your CVS password as well.

If you'd like we can block the newer account you created once you have control back of your original account.

thanks for quick answer.
problem was fixed.
best regards
esmailzadeh

thanks all things is all right now.
is this possible that attacker uses xss attack or anything like this? (if true is this possible for attacker to use this exploit again?)
i think attacker did not use brute force attack because this happened in a few seconds.

I deleted the comment on g.d.o.