Login |
|
|
|
|
Navigation
|
|
Hall of Fame
|
SkareCrow was able to add any user he wanted to his Zero Identity War\'s team without consent from the user.
|
|
Discovered on: 07.27.08 |
|
SkareCrow found cross-site scripting vulnerabilities in the Zero Identity Wars page. He realized that HTML was not being filtered in the shout box posts and allowed him to insert any code he wished.
|
|
Discovered on: 07.25.08 |
|
el3v3nty discovered that the user data of the id on the set cookie was being returned before being checked for the correct password, so he was able to post a comment as anyone he wanted.
|
|
Discovered on: 04.05.08 |
|
|
|
|
|