|
||||||
|
Views:
11,031,098 |
   
Main
| FAQ
| IRC chat
| Memberlist
| Active users
| Latest posts
| Stats
| Ranks
| Online users
| Search
|
11-22-24 02:01 AM |
||||
| Guest: Register | Login | ||||||
| 0 users currently in Craziness Domain 二番: Kuchi Kopi's Bar | 29 bots |
| Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands |
| Thierry |
| ||
Normal User
  Level: 108    
Posts: 2385/3456 EXP: 13268641 Next: 251858 Since: 03-19-13 Last post: 2 days Last view: 2 days |
oh my. it seems I broke your little toy. you see, I found a slight and easy exploit letting you insert HTML into the custom thread icon field. while there are some limits in place to prevent this, they do not cover all possibilities and a workaround is easy.
at first I simply intended to have the thread icon be bigger than allowed, to see if this was possible. as I experimented with it further, I decided to insert link tags in order to inject styles onto the page from an external CSS file. to sum it up, within the 100 characters available you can insert any HTML and call external resources, so long as you have space. you cannot bypass the character limit. while said character limit is preventing you from inserting lots, I am pretty sure you can stuff script up there, or link some if the restrictions break the script. this prank is aimed towards Epele/Emuz so they may eventually fix this vulnerability. granted, I also simply wanted to have fun. and I did! but whatever you do, please do not strip it before they get to see. thanks! if need be, feel free to PM me for a clean report of my attempts, observations and results. |
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17530/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
Noted, Gonna move this in the meantime. The world could always use more heroes! |
| Danielle |
| ||
Normal User
    Miracles Happen When you believe... Level: 256
Posts: 14125/25311 EXP: 270466050 Next: 1657377 Since: 07-16-12 From: Albany, NY OS: Windows 98 Last post: 357 days Last view: 357 days |
What did I say about taking too many Orange and black pills? 😂 "Miracles happen, when you believe..."
YouTube |
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17533/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
What are the black pills? The world could always use more heroes! |
| ゼンガー・ゾンボルト |
| |||
Normal User
 Roy Koopa My name is Sanger Zonvolt. I am the Sword that cleaves evil! Level: 155
Posts: 5589/7703 EXP: 46378664 Next: 1038556 Since: 01-04-12 From: Sweden Last post: 1268 days Last view: 1232 days |
|
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17534/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
Hmm..
Maybe you don't just see it yet. The world could always use more heroes! |
| Nicole |
| ||
|
Administrator
Goddess of the Apocalypse Level: 200
Posts: 11270/14042 EXP: 114149698 Next: 979691 Since: 01-03-12 From: Boston, MA Last post: 468 days Last view: 467 days |
♥11270 ✿4706 ★50 Everything looks fine to me, marking this as "no problem" |
| Thierry |
| ||
|
Normal User
Level: 108
Posts: 2388/3456 EXP: 13268641 Next: 251858 Since: 03-19-13 Last post: 2 days Last view: 2 days |
yawn~
stare harder, Trapster~ stare harder, Trapster~ stare.. zzz |
| Danielle |
| ||
|
Normal User
Miracles Happen When you believe... Level: 256
Posts: 14126/25311 EXP: 270466050 Next: 1657377 Since: 07-16-12 From: Albany, NY OS: Windows 98 Last post: 357 days Last view: 357 days |
Orange and black... single capsule, not two separate tablets😉 "Miracles happen, when you believe..."
YouTube |
| ゼンガー・ゾンボルト |
| |||
|
Normal User
Roy Koopa My name is Sanger Zonvolt. I am the Sword that cleaves evil! Level: 155
Posts: 5590/7703 EXP: 46378664 Next: 1038556 Since: 01-04-12 From: Sweden Last post: 1268 days Last view: 1232 days |
|
| Needle |
| ||
|
Normal User
cuddles...? o.o Level: 78
Posts: 1702/1889 EXP: 4278291 Next: 103935 Since: 06-16-17 From: Sweden Last post: 355 days Last view: 9 days |
And now the latest post page is fucked up again.
Gee thanks. |
| Danielle |
| ||
|
Normal User
Miracles Happen When you believe... Level: 256
Posts: 14136/25311 EXP: 270466050 Next: 1657377 Since: 07-16-12 From: Albany, NY OS: Windows 98 Last post: 357 days Last view: 357 days |
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17537/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
🐟
Wait for the fish. The world could always use more heroes! |
| Thierry |
| ||
|
Normal User
Level: 108
Posts: 2389/3456 EXP: 13268641 Next: 251858 Since: 03-19-13 Last post: 2 days Last view: 2 days |
and somehow,
Eppy posts that bigg fish right when I wake up and come back on. suspicious! |
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17540/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
And all the lights went out! The world could always use more heroes! |
| Danielle |
| ||
|
Normal User
Miracles Happen When you believe... Level: 256
Posts: 14140/25311 EXP: 270466050 Next: 1657377 Since: 07-16-12 From: Albany, NY OS: Windows 98 Last post: 357 days Last view: 357 days |
Well that was fun while it lasted, heh  Shouldn't the post icons be base64 too  "Miracles happen, when you believe..."
YouTube |
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17542/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
Out-smarted by the css fairy again.
Looks like I need to try again. The world could always use more heroes! |
| Thierry |
| ||
|
Normal User
Level: 108
Posts: 2392/3456 EXP: 13268641 Next: 251858 Since: 03-19-13 Last post: 2 days Last view: 2 days |
hehe~
regardless, the fix for the thread icon is good. outright bans quote marks and brackets. it was fun to mess around with. Edit: also whoops, I had Epele reduce the max icon width to 17px. the bunny won't show in fullsize. |
| Epele |
| ||
|
Site Administrator
The Sorceress. Boing~ Level: 237
Posts: 17543/20774 EXP: 205450027 Next: 2528907 Since: 01-01-12 From: UK Last post: 1052 days Last view: 2 hours |
Welp.
That's some insane css levels now. The world could always use more heroes! |
| Kak |
| |||||
Global Moderator
 Bullet Bill well then Level: 131
Posts: 5369/5515 EXP: 25738383 Next: 686237 Since: 01-29-14 From: ??? Last post: 1047 days Last view: 993 days |
|
| Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands |
 Acmlmboard v2.5.6 (06/11/2024) © 2005-2024 Acmlm, Emuz, et al. |
|
MySQL - queries: 218, rows: 691/729, time: 0.071 seconds. |
