vShare 2.5 Test Site

[admin]

i just tried putting...

test's "quotes" !"£$%^&*()_`¬+@~{}[]?/\:| chars

...into each field when uploading a video. all that gets displayed is...

test's

...as it seems all text after the quotes disapears.

in the keywords after the ' in test's it disapears

if you edit the video putting the above in then you get an SQL error.....see http://www.mktube.com/view/22/don-t/

This is how it worked so far. It only support words, no special chars. On next release, we will add better support for non English URLs as it need editing all templates.

Bug will signup and group will be fixed tomorrow.

[videotobe]

can it be birthday questioning for 18+ videos??

[abba]

admin,
pls fix the XSS injectable in search.php
I have send you the details in a PM and email too.

And is there a possiblity that I could get an unencrypted version, so that i could fix this myself.

UPDATE: seems like its fixed in 2.5

[abba]

There is a security Vuln in the signup.php and login.php
$next is not properly filtered against XSS.

Admin i have PMed you the Proof of Concept. (exploit)

[admin]

in a group that requires the owner to approve new topics, the "approve" link does not work.

This is fixed.

[leki]

the "now playing" is displaying the wrong video image when viewing some videos

http://www.mktube.com/view/13/test/

http://www.mktube.com/view/26/test/

[leki]

if you view http://www.mktube.com/group/test/ while not logged in it says " Your request is sent to the owner."

should maybe say something like "log in to join this group"?

[igorcreed]

If you click in admin area "view advertisement" the left frame disappears and "/admin/main.php" opens.