LOST-Chall
http://lost-chall.org/forum/

XSS - status:fixed
http://lost-chall.org/forum/viewtopic.php?f=14&t=140
Page 1 of 1
Author:  criple_ripper [ Sun Jun 08, 2008 11:47 am ]
Post subject:  XSS - status:fixed

hi just show the new user profile feature...great...but i think it is XSS vulnarable... think you should fix it quickly...

criple_ripper
Author:  sabretooth [ Mon Jun 09, 2008 11:15 am ]
Post subject: 

I believe Bregi is looking into this (last time I heard) I am still fairly inactive til my assignment is done.

Thanks again for your support ;)

sabre
Author:  Bregi [ Mon Jun 09, 2008 3:37 pm ]
Post subject: 

I'm pretty sure it's unexploitable. The same filter is used as in the other pages. So I will leave that this way. Told cripple_ripper already :P

Greez
Author:  sabretooth [ Tue Jun 10, 2008 8:09 am ]
Post subject: 

I'm not too sure at the minute. Ive been looking into it further.

I'll run a few tests on it today if/when i can, and see what I find.

Thanks

sabre
Author:  Bregi [ Fri Jun 13, 2008 4:56 pm ]
Post subject: 

I fixed it, thanks to Mr_KaLiMaN for mentioning it again.
VIP badge for Mr_KaLiMan, he already reported bugs in the past.

Bregi
Page 1 of 1 All times are UTC