Kupika Vulns Login to Kupika  or  Create a new account 

This diary entry is written by neoeno. ( View all entries )
Previous entry: Free Porn, no lie! in category (general)

Kupika VulnsCategory: (general)
Saturday, 17 March 2007
10:35:29 AM (GMT)
Just been doin' some messin', found some interesting things, these now give me the
ability to:

Stop someone from using the 'fleeting thoughts' box permanently.
Create an undeletable comment on oekaki, diary entries, or kupipages (or anywhere
else allowing comments), which will obscure the diary entry.
Completely prevent use of kupika.
The above ability is no fun. I could dupe users into doing things they don't want to.
For example, I could change some of the links at the top, so that they all take you
to my profile, or give me all your kupipoints, or such.

There are some other things I might be able to do, but I haven't looked into that,
either way this is all a problem. My experience is that when you have holes on social
networking sites, eventually someone exploits them.

PS: Oh, and javascript can be executed;

BrieAnna says:   17 March 2007   916152  
lol, thats not good.
x_dopeshow says:   18 March 2007   864399  
hina says:   19 March 2007   567551  
"My experience is that when you have holes on social networking
sites, eventually someone exploits them."

Very true. I am glad it is you who discovered this issue and then
reported it instead of exploiting the flaw =)

Anyway, I have fixed the embeddable javascript hack, and I am not
aware of other ways someone can do the above-mentioned things without

Are you referring to another method, or is this entry a continuation
of your previous one?
kelw9 says:   20 March 2007   811265  
lilmisssunshine says :   29 March 2007   731679  
and why did u try this!!


Next entry: Kupika Vulns 2 in category (general)
Related Entries
Margarette: Hi
The_One: This is really awesome. Check it out. --Jacob Things people do on Kupika that are amazing
‹tea-anna›: Generous KupiPoint Donations.
‹єmotiøn;;›: Comment My New Pokemon Oekakis Please C:!
MissionHeadquarters: Our own Oekaki board! Club news

About Kupika    Contact    FAQs    Terms of Service    Privacy Policy    Online Safety
Copyright © 2005-2012