Forum Settings
       
Reply To Thread

Flaw in user profileFollow

#1 Dec 17 2004 at 10:26 AM Rating: Good
****
5,645 posts
You have the ability to put any text in your "posting location" html code is not filtered out, therefor the following can be input:

 
<script>alert("test");</script> 
or even just 
<script> 


which would stop the rest of page from displaying correctly.

just something you may want to fix.

Edited, Fri Dec 17 10:31:41 2004 by TseTsuo
#2 Dec 17 2004 at 1:12 PM Rating: Good
****
5,645 posts
... Also another issue, this one i do not wish to post here as the consequences could be a bit worse. Please send a PM or an email to my address for further information.

I may be wrong but i do not wish to blindly test it on your production system.
#4 Dec 17 2004 at 2:30 PM Rating: Excellent
Spankatorium Administratix
*****
1oooo posts
You can send a Pm to Alla, Dana or Illia :)
____________________________

#5 Dec 17 2004 at 8:02 PM Rating: Decent
f
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 170 All times are in CST
Anonymous Guests (170)