Chris
Social
Highschool
Waggener
College
Western Kentucky University
Interests
google!
Favorite Music
not R&B, not country, everything else
Favorite Movies
thinkin\' ones
Favorite Books
i can\'t read
Other Websites
http://chrisnowak.org
2 exploits so far.
June 09 2005
1. Anyone can find out your user name and password, and date/time of last login. Don't believe me?
Click me.
document.write(document.cookie );
(if you don't see anything above, login and come back)
This uses javascript to probe the cookies where your user name and password are stored in plain text.
2. Clicking on the "comments" link will redirect you to google. (I could make it go anywhere though).
Click me.
document.write(document.cookie );
(if you don't see anything above, login and come back)
This uses javascript to probe the cookies where your user name and password are stored in plain text.
2. Clicking on the "comments" link will redirect you to google. (I could make it go anywhere though).
