Welcome to Guess That Album, the game where you draw artful renditions of your favorite albums and have others guess what they are! Head over to the FAQ to get started.
My web dev nerd friend found a bug
aMemeAddictPosted on 5/15/2022 at 3:17 PM
I won't go into detail because he says it might be used as a dangerous exploit.
He put in a script tag with alert in the artist and title tabs, which appear when you make a guess on this album:
[error: album deleted]
Since he was able to put in a script in the artist/title, he thinks "this could be used to reach a user's cookies and potentially hijack an account". I don't know whether that's true or not but that would be pretty wack yo.AdminPosted on 5/16/2022 at 8:32 AM
What your friend describes makes sense, I'll try to make a fix if it is indeed exploitable in that way.
analiasPosted on 5/17/2022 at 3:31 AM
if i had a nickel for every SQL exploit...
Log In to post.
[Return]