Re: tdforum 1.2 Messageboard
From: 5-i's (fiveyes@iiiii.com)Date: 08/20/01
- Previous message: Ian Gulliver: "Lotus Domino DoS"
- In reply to: 5-i's: "tdforum 1.2 Messageboard"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: fiveyes@iiiii.com (5-i's) To: bugtraq@securityfocus.com Subject: Re: tdforum 1.2 Messageboard Date: Mon, 20 Aug 2001 21:30:03 GMT Message-ID: <3bab7178.331653053@mail.msy.bellsouth.net>
First of all, I'd like to thank those of you who've e-mailed me and
pointed out some issues in this matter. I also need to apologize for
having my "reply to" field incorrectly set on that first posting.
It's been awhile since I participated in a mailing list.
A special thanks goes to the fellow that pointed the change in
templates that I'd overlooked! I thought to save the html page after
I had made the discovery and it is time-stamped on my computer
"8/18/2001 01:17 PM" (CDT here in New Orleans). It is available
on-line at http://www.iiiii.com/TD%20Forum%20message%20board.htm. The
top and bottom of the document are made from templates and I'll have
you note the differences between that and the archive page made on the
19th as well as the current file at http://www.tdscripts.com/tdforum/.
In other words, we have a retroactive update here. :)
Another fellow made mention of something that I'd overlooked in my
second posting, that I had purchased a second copy of this program on
the 18th, this is time-stamped on my computer as 8/18/2001 09:24 AM.
I bought this between Messages #542, 543 and 544, when I was surprised
to find my attempt to place an alert into forum failed. After buying
another copy of the program, and rechecking that nothing had changed,
I placed Message #546, testing a general HTML tag. TDavid had, in the
meantime, shown up and deleted my first attempts at inserting a
javascript alert. Oh, here's where they ask me about buying the
second script -
http://www.69spot.com/cv/showthread.php3?s=&threadid=1628 I'll make it
available online if they attempt to modify or remove it.
Another fellow sent along this message (I'll give proper credit later
if he wishes, I believe he thought he was posting to the list at the
time) "Hi,
Notice that: http://www.tdscripts.com/tdforum/
Doesn't filter our email HTML tags, i.e:
"><script>history.go(-1)</script>
Will cause it to "not show" you the page...
See: http://www.tdscripts.com/tdforum/"
Mmmmm, that's it for right now.
Larry (5-i's) Lung
- Previous message: Ian Gulliver: "Lotus Domino DoS"
- In reply to: 5-i's: "tdforum 1.2 Messageboard"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
