Username: 
Password: 
Restrict session to IP 
Online within 1d

Login Referer XSS

Global Rank: 24
Totalscore: 390563
Posts: 263
Thanks: 215
UpVotes: 274
Registered: 18y 257d






Last Seen: 114d 2h
The User is Offline
Login Referer XSS
Google/translate1Thank You!0Good Post!1Bad Post! link
After logging in the page redirects to the referer url without any validation:
You will get redirected to <script>alert(1)</script> in 5 seconds.
Global Rank: 82
Totalscore: 212797
Posts: 148
Thanks: 207
UpVotes: 109
Registered: 18y 258d
Kender`s Avatar



Last Seen: 4y 229d
The User is Offline
Login Referer XSS
Google/translate1Thank You!1Good Post!0Bad Post! link
Tsktsktsk, that's not how I built it. Gizmooooore!!!!
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d




Last Seen: 64d 17h
The User is Offline
Login Referer XSS
Google/translate1Thank You!1Good Post!0Bad Post! link
yayaya,
i am totally guilty for that Smile

the problem has been fixed now.

btw: this xss was a very poor attack vector ;)
The geeks shall inherit the properties and methods of object earth.
obeid2, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 3943 times.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.