KhB's blog

How does the search works?[Bug]
By KhB, history, 6 years ago, translation, In English

The other day I was going to look for tasks in the archive, but I ran into a bug (feature). When I search for "ready", it gives me "Power sockets" task. Something went wrong?

  • Vote: I like it
  • +111
  • Vote: I do not like it

Comments Comments (6)
| Write comment?
»
6 years ago, hide # |
← Rev. 4  
Vote: I like it +21 Vote: I do not like it

Further investigation: depending on the selected archive task page, different tasks are shown. But still not related to the ready theme.

→ Reply
»
6 years ago, hide # |
 
Vote: I like it +41 Vote: I do not like it

Auto comment: topic has been translated by KhB (original revision, translated revision, compare)

→ Reply
»
6 years ago, hide # |
← Rev. 2  
Vote: I like it +61 Vote: I do not like it

The same for word "class":

→ Reply
»
6 years ago, hide # |
 
Vote: I like it 0 Vote: I do not like it

Auto comment: topic has been updated by KhB (previous revision, new revision, compare).

→ Reply
»
6 years ago, hide # |
 
Vote: I like it +23 Vote: I do not like it

Try this payload on handle search:

<script\x20type="text/javascript">javascript:alert(1); ,

it should give "no such user" while it gives an error page. Might be vulnerable, I am not a tester. I was afraid to ask this in a post seeing a lot of downvotes in one of my posts.

→ Reply
»
6 years ago, hide # |
← Rev. 4  
Vote: I like it +18 Vote: I do not like it

Also words "remove", "click", "response", "function", "alert", "type", "toggle" and "codeforces" gives same result. Even parts of the link "sta.codeforces.com/s/" works in the same way.

It is really strange, that it works only on problemset page and gives only the first problem.

→ Reply