[Mediocrity_mybb_import6293]

i was teaching myself Xss for about a day but got bored i dont really liek that type of hacking find it borign and un-useful

[Coded32]

Well, it would benefit if it was a persistent XSS on that, get a shell and rOOt the whole thing.

[zer0hnic]

great job!
Report it now!

[Shining White]

great job!
Report it now!

its so older men ,

[balmohan]

I dont think its a hack try passing plain texts gets same alert box by eliminating xss tags <,>,(,),",'

http://www.microsoft.com/ru-ru/events/pl...g=jhnjkhnj

I think <script> , alert(" ") are filtered and only string is passed so its showing final result as string in alert

Then add string in brackets and hit enter both brackets eliminited and only string is shown

now again pass <"Hii its not easy to hack me"> again < & > & " are removed so its not hack what ever you passed except string is filtered and only string is displayed

Hope you cleared actually what was that