Rev Potential exploit.

[Dan Smith]

Basicly. i belive that rev is xxs cross scriptable.

All thats needed is to set your motto to <script>alert('XXS')</script> and on online, it sends an alert.


Does anybody have a fix for this?

The fix will be largely appreciated!

Also, you may want to know:
Whats is XXS?

You must be registered for see links

-Dan

 

[Derpec]

Is rage under cloud flare protection just wondering?

 

[Legion]

If they change their motto via client it would appear on the online users page for their motto, and also it can't be seeing as we're using v3.8.1 licensed Phoenix and it works and like we've said multiple times it's not staff doing it thats a problem, it's users.

Solution: Take out any forms to see someone else's Motto other than your own. (Staff page, Online users, ect..)

 

[Dan Smith]

Also, cant XXs be used to upload a shell? correct me if i'm wrong

 

[Tomm]

Also, cant XXs be used to upload a shell? correct me if i'm wrong

Yes I believe so.

 

[Clit]

If they change their motto via client it would appear on the online users page for their motto, and also it can't be seeing as we're using v3.8.1 licensed Phoenix and it works and like we've said multiple times it's not staff doing it thats a problem, it's users.

Actually I came on to test it, Doesn't work.
Also, nobody in the history of retro's unwritten records has attempted this, nor has it been brought it.

 

[Find]

I have taken it out now apart from on staff page, but I would of preferred to find a fix for the problem instead of having to remove it.

 

[Sledmore]

I didn't know people were this stupid. Go read RevCMS from top to bottom, this is PURELY YOUR FAULT.

You must be registered for see links

made the 'filter' function for a reason, go apply 'filter($tag)' to where needed, this is purely YOUR FAULT, and to your motto updating, if you have this coded via the CMS.