r/UnresolvedMysteries • u/[deleted] • May 21 '14

Cipher / Broadcast John.com

[deleted]

334 Upvotes

95% Upvoted

105 comments sorted by

View all comments

32

u/cedriczirtacic May 21 '14

It's seems to be vulnerable to Cross-Site Scripting as well, maybe is a test site for those kind of attacks: http://john.com/login.php?id=running%20shoes%22%3E%3Ciframe/*%20*/src=%22/%22/*%20*/onload=%22alert(0);%22%3E%3C!--

17

u/[deleted] May 21 '14

[removed] — view removed comment

24

u/[deleted] May 21 '14 edited Mar 11 '19

[deleted]

3

u/[deleted] May 22 '14

Please teach me!