Search results for query: *

By setting your username glow to ",red 20px 20px 3px", you can make your username offset. e.g. (and check skype, I msg'd you a global XSS in vbshout)

how do i make it so people can buy vBpoints with paypal / subscriptions.php ?!

In one of your mods, I found a SQL Injection in.. Fillip is most likely passed out ATM, so not sure who I should contact. I won't say which mod it is in this thread so that people don't go and look for it.. Who to contact? ( Warning: mysqli_query() [function.mysqli-query]: (42000/1064): You...

on my vbshop https://www.bugabuse.net/vbshop.php the hover doesnt work. so people can't see how much the prices for things are etc. i debugged a bit with firebug googled a bit - https://www.bugabuse.net/dbtech/vbshop/clientscript/vbshop_hover.js...

9ca071f1bfd31747edd535c895552f97.png lol pls. just set ur glow, name color, whatever u can to some html and it executes.. fix prtypls

https://developers.google.com/speed/pagespeed/insights#url=https_3A_2F_2Fwww.bugabuse.net_2Fmembers_2Falex__j__leon.html&mobile=false&rule=SpriteImages use CSS sprites instead of indivdual images. Possible? Can be made? Thanks..

1) Make it so, it will MD5() the shouts page and if it has changed, it will send out a request to refresh, but if it hasnt, it does nothing.. this would save alot of serverload and lag. 2) Allow CDN for the shouts and stuff. (This would require the MD5() Thingy) Ok, thanks

My suggestion: allow an option for markup usernames to be used.

when you have https on your forum, and someone posts an image that uses http, you lose ur https on that page. my idea is to pretty much download all images and save them internaly. or even 'GET' them and cache them. Here is the code I've made up to nearly emulate it: <?php session_start()...

# Exploit Title: vBshop persistent XSS 0day # Google Dork: "DragonByte Technologies Ltd" vbshout # Date: 25/3/2012 9:32 PM #EST # Author: ToiL # Software Link: http://www.dragonbyte-tech.com/ # Version: all # Tested on: all # CVE : XSS #Greeting from Team Odyessy. #Today we will release a 0day...

Nevermind, Fixed.

# Exploit Title: vBShout persistent XSS 0day # Google Dork: "DragonByte Technologies Ltd" vbshout # Date: 21/3/2012 9:00 PM #EST # Author: ToiL, DmoneyB, Ant-Man # Software Link: http://www.dragonbyte-tech.com/ # Version: all # Tested on: all # CVE : XSS #Greeting from Team Odyessy. #Today we...