Lovely hack of SCO's site

Tuesday, August 12, 2003

khorgath — Aug 12, 2003 4:39:21 AM — # ↩

The URL doesn't work as-is.

Maybe this'll be a bit better.
- khorgath — Aug 12, 2003 4:40:03 AM — # ↩
  
  oh wait - now the original URL works. funny.
- kalyan — Aug 12, 2003 6:49:15 AM — # ↩
  
  Nice way to exploit XSS on sco website :)
mannu — Aug 12, 2003 7:22:22 AM — # ↩

Exciting to know, but the site is down right now. Even the home page is not accessibe. I'm getting a 500.
bluesmoon — Aug 12, 2003 2:05:01 PM — # ↩

well, the url isn't opening for me (it's terribly slow), but from the url, I can guess what it is. That, of course, is what happens when HTML authors start thinking that they're programmers. Did something similar to vjungle.com when it first opened for beta testing. Part of the service included registering a subdomain - yourcompany.vjungle.com

They had this amazing javascript form validator that wouldn't allow invalid characters into fields. Disable JS, and voila! I registered my name as an <img src> and was even able to register a subdomain with a space in it.

Then emailed customer support asking them why my domain didn't work.
ravi — Aug 14, 2003 8:55:34 PM — # ↩

Prices? Prizes?

Congrats on becoming amru =)