3 ms·

Found an XSS. Check your strings: http://michaelyingling.com/random/calvin_and_hobbes/search.php?phrase=%3Cscript%3Ealert(%27pwnd%27)%3C/script%3E http://micha

• stevebmark 6y ago
  Could be SQL injectable too as an apostrophe raises an error
  • tyingq 6y ago
    I think it is. This hangs, though for more than 10 seconds: http://michaelyingling.com/random/calvin_and_hobbes/search.php?phrase=%27%20AND%20sleep(10) http://michaelyingling.com/random/calvin_and_hobbes/search.p...
• LeifCarrotson 6y ago
  I don't OP is the author, I've been using this for years.
• deleted 6y ago
  [deleted]
• svnpenn 6y ago
  Why are you the way that you are? https://m.youtube.com/watch?v=aYmOqPFyJPw https://m.youtube.com/watch?v=aYmOqPFyJPw