[B] Enter the code, get a blank page

[Imad Jomaa]

If you enter this code as the title of a private message, fill in the rest of the information and click send, you'll get a blank page:

Code:

"1or"1="1/><marquee>

The same goes for logging in, searching for users using the member list search engine, and posting new threads.

Can anyone recreate? Make sure you use the exact code I posted when trying to recreate it, otherwise you'll get something different.

[Yumi]

I can't seem to reproduce on localhost, but it has that issue here (probably something related to the filtering system here).
Can you reproduce this on your own server/setups?

[destroyer]

Confirmed...

[Imad Jomaa]

I was able to recreate a few times. However, I can't seem to reproduce it on my servers anymore. Furthermore. I conclude it's a problem with this site here.

[Ryan Gordon]

Intrusion Detection System for the win. Do it enough times and it'll kick ur a$$

[Imad Jomaa]

Haha.