Kiwibonga Advance Message Boards

Kiwibonga Advance Message Boards
Register | Member List | Site main | Board main

Login
Login: Password:

4 user(s) online: 4 guests - 1298 visitors in the last 24 hours.
Pages: 1

Post Reply

Kiwibonga Advance > Kiwibonga Advance Boards > Bug Reports > And another!

M_DCad
Posts: 12/17

Bugernaut baby

Location: Calgary
[E-mail]
[AIM]
Last Activity: 8166 day(s) and 19 hour(s) ago
Registered: Jan 9 2003

Posted on 01/10/2003 at 08:43:21AM

Quote

Example URL (Remove the space inbetween "scr" and "ipt"):

http://www.kiwibonga.com/gba/shownews.php?action=showarchive&month=1&year=%3Cscr ipt%3Ealert(String.fromCharCode(68,111,104,33))%3C/script%3E

This time, it's because of the way shownews.php prints $year (and probably $month, although I haven't checked this) to the page.
-----------

Edited by M_DCad on 01/10/2003 at 03:44:56AM
Edited by M_DCad on 01/10/2003 at 03:45:42AM
Edited by M_DCad on 01/10/2003 at 03:46:15AM

Kiwibonga Advance > Kiwibonga Advance Boards > Bug Reports > And another!

Post Reply