Since its patched now, Here is some live XSS on gaiaonline.

[Skrillex]

Smooth move, Aleena.

Not everything can be held onto. Smart one. Atleast he posted about it. And not just kept it to himself. Learn how to be a good new member. moteSerious:

[Taz]

Not everything can be held onto. Smart one. Atleast he posted about it. And not just kept it to himself. Learn how to be a good new member. moteSerious:

Huh. ?

[Aleena]

Not everything can be held onto. Smart one. Atleast he posted about it. And not just kept it to himself. Learn how to be a good new member. moteSerious:

...? I dont think he was insulting me o.0
Though if he was *shrugs* Whatever he needs to feel good about himself.

Its not like I dont have a handfull of other exploits still functional.


Here are some of my toys found and patched in the last two months
--------------------------------------
Banning users from flashgames using moddog
Admin panel access
Email / cash purchase history lookup
Send false ban requests in moddog
Cashshop editor
Create secondary password
Crypto bypass method for secondary password
Enabling / Disabling admin panel functions for public use
Enabling / Disabling test server public use.
Editing / Creating pages in gaiaonline
Editing event pages
And today, XSS through the event editing page

Hell, There are still exploits not patched.
(Only posting one which I posted publicly last week, Others stay UG)
http://gaiaonline.com/admin/flash/vj_utils.swf

And dont worry, I will toss out some more stuff in UG in the near future, Just trying to decide what would be a good one to start with that wouldn't adversely effect the others.

[The Unintelligible]

Not everything can be held onto. Smart one. Atleast he posted about it. And not just kept it to himself. Learn how to be a good new member. moteSerious:

Wasn't what I meant by 'smooth move', but OK.
Anyways, just an FYI - I've been here longer than you have.

[Skrillex]

Wasn't what I meant by 'smooth move', but OK.
Anyways, just an FYI - I've been here longer than you have.

Just a FYI Looks like you made a account and left. Then came back all of a sudden. Date you joined doesn't mean anything.

[The Unintelligible]

Not everything can be held onto. Smart one. Atleast he posted about it. And not just kept it to himself. Learn how to be a good new member. moteSerious:

Oh, but it does mean something when you directly stated that I'm a new member. Which was false, might I add. Something ironic to throw on-top of that is the fact that I've been here longer than you, which gives you no sense of entitlement whatsoever to tell me what you told me.

[Skrillex]

Oh, but it does mean something when you directly stated that I'm a new member. Which was false, might I add. Something ironic to throw on-top of that is the fact that I've been here longer than you, which gives you no sense of entitlement whatsoever to tell me what you told me.

You know. I like your user title. The UnIntelligible
I'm new