TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Imgur.com exploit that allowed arbitrary JavaScript to be embedded

15 点作者 forgotmypassw超过 9 年前
Apparently there was some bug on imgur.com that allowed people to upload arbitrary JavaScript appended to the images. imgur.com seems to have acknowledged the issue already[0]. The exploit found was targetting an imageboard called 8chan[1]. There are also a few threads on 4chan about this[2][3][4][5].<p>[0] https:&#x2F;&#x2F;twitter.com&#x2F;imgur&#x2F;status&#x2F;646109824342593536<p>[1] http:&#x2F;&#x2F;pastebin.com&#x2F;heYvWu5Y<p>[2] https:&#x2F;&#x2F;rbt.asia&#x2F;g&#x2F;thread&#x2F;50407085<p>[3] https:&#x2F;&#x2F;rbt.asia&#x2F;g&#x2F;thread&#x2F;50409306<p>[4] https:&#x2F;&#x2F;rbt.asia&#x2F;g&#x2F;thread&#x2F;50410681<p>[5] https:&#x2F;&#x2F;rbt.asia&#x2F;g&#x2F;thread&#x2F;50411692

1 comment

emmab超过 9 年前
This is called XSS. see here:<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Cross-site_scripting#Persistent" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Cross-site_scripting#Persisten...</a>