Gym Bug
Started by TherealCheesy [1014057] on in Bugs & Issues.
About this thread
Posts archived: 18 / 18 posts (100%) · the total is Torn's reply count + the opening post at the last fetch
Counted by TornLife from the archived posts.
- Archived posts
- 18
- Discussion span
- →
- People posting
- 15
- Likes on archived posts
- 17
- Posts by staff, officers and moderators
- 2
- Authority score
- 59 / 100
- Historical score
- 41 / 100
- Story score
- 55 / 100
- Engagement score
- 69 / 100
Most-liked replies
Edit: ALAN!
It's not a hack, you are just imbedding text via the url, it doesn't have any effect that could be described as hacking
This link has the exact same effect
http://www.torn.com/gym.php?output=Hi%20%My%20%name%20%is%20MadameButterfly&style=ready
but only works if you use that exact link, any words could be put into it but only the person using the link would see it
MadameButterfly:
The ONLY reason this is not a MAJOR flaw is that it seems it fortunately HTMLEncodes the output. If it hadn't this would easily have been used to execute JavaScript client side, otherwise known as XSS.
So this is sort of a flaw, but at first glance it doesn't seem to exploitable.
Edit:
It doesn't HTMLEncode, it just removes tags.
![[image: i60.tinypic.com]](http://i60.tinypic.com/2l8vpye.png){kind=link}
Hades u r so kewl. o_o
![[image: rs1img.memecdn.com]](http://rs1img.memecdn.com/high-five_o_374203.jpg){kind=link}
The great and mighty hacker can't figure out how to link.
It'd be nice to be able to customise the boring message there.
(p.s. it's a little not-PC I know but for any cheeseeburger lovers out there who would never put down their object of their affection to get on a stinking treadmill, well you have my utmost and sincerest apology for putting such blasphemy into words)
Fixed it
Nice little necro job there... :o
Nice find, but the appropriate thing to do is to file a bug report (anonymously to a member of staff) and pass the issue on.
As this is abusing a bug, it can cause an individual to think their account has been hacked and an anonymous mail could be sent from a player demanding details / payment.
Not a multi, kthxbai.
~ Ched.
Gym bug...
Gym bug...
Gym bug...
You put the boom-boom into my heart
You send my soul sky high when your lovin' starts
Jitterbug into my brain
Goes a bang-bang-bang 'til my feet do the same
But something's bugging you
Something ain't right
My best friend told me what you did last night
Left me sleepin' in my bed
I was dreaming, but I should have been with you instead.
First bogie, now this. How many accounts does this 'Ched' guy have.
Bahahaha
So, you're a hacker. I like to hack too.
So, you're a hacker. I like to hack too.
Moved...
Fixed, will be released tomorrow.
Thanks