basic 7 or hbh exploit
if( !document.layers && !document.all && !document.getElementById ) event = "test";
function showtip( current, e, text ) {
if( document.all || document.getElementById ) {
thetitle = text.split('<br>');
if( thetitle.length > 1 ) {
thetitles = '';
for( i = 0; i < thetitle.length; i++ )
thetitles += thetitle[i];
current.title = thetitles;
} else
current.title = text;
} else if( document.layers ) {
document.tooltip.document.write('<layer bgColor="white" style="border:1px solid black;font-size:12px;">'+text+'</layer>');
document.tooltip.document.close();
document.tooltip.left=e.pageX+5;
document.tooltip.top=e.pageY+5;
document.tooltip.visibility="show";
}
}
function hidetip() {
if( document.layers )
document.tooltip.visibility = "hidden";
}
/*
Flipbox written by CrappoMan
simonpatterson@dsl.pipex.com
*/
function flipBox(who) {
var tmp;
if (document.images['b_' + who].src.indexOf('_on') == -1) {
tmp = document.images['b_' + who].src.replace('_off', '_on');
document.getElementById('box_' + who).style.display = 'none';
document.images['b_' + who].src = tmp;
} else {
tmp = document.images['b_' + who].src.replace('_on', '_off');
document.getElementById('box_' + who).style.display = 'block';
document.images['b_' + who].src = tmp;
}
}
function addText(elname, wrap1, wrap2) {
if (document.selection) { // for IE
var str = document.selection.createRange().text;
document.forms['inputform'].elements[elname].focus();
var sel = document.selection.createRange();
sel.text = wrap1 + str + wrap2;
return;
} else if ((typeof document.forms['inputform'].elements[elname].selectionStart) != 'undefined') { // for Mozilla
var txtarea = document.forms['inputform'].elements[elname];
var selLength = txtarea.textLength;
var selStart = txtarea.selectionStart;
var selEnd = txtarea.selectionEnd;
var oldScrollTop = txtarea.scrollTop;
//if (selEnd == 1 || selEnd == 2)
//selEnd = selLength;
var s1 = (txtarea.value).substring(0,selStart);
var s2 = (txtarea.value).substring(selStart, selEnd)
var s3 = (txtarea.value).substring(selEnd, selLength);
txtarea.value = s1 + wrap1 + s2 + wrap2 + s3;
txtarea.selectionStart = s1.length;
txtarea.selectionEnd = s1.length + s2.length + wrap1.length + wrap2.length;
txtarea.scrollTop = oldScrollTop;
txtarea.focus();
return;
} else {
insertText(elname, wrap1 + wrap2);
}
}
function insertText(elname, what) {
if (document.forms['inputform'].elements[elname].createTextRange) {
document.forms['inputform'].elements[elname].focus();
document.selection.createRange().duplicate().text = what;
} else if ((typeof document.forms['inputform'].elements[elname].selectionStart) != 'undefined') { // for Mozilla
var tarea = document.forms['inputform'].elements[elname];
var selEnd = tarea.selectionEnd;
var txtLen = tarea.value.length;
var txtbefore = tarea.value.substring(0,selEnd);
var txtafter = tarea.value.substring(selEnd, txtLen);
var oldScrollTop = tarea.scrollTop;
tarea.value = txtbefore + what + txtafter;
tarea.selectionStart = txtbefore.length + what.length;
tarea.selectionEnd = txtbefore.length + what.length;
tarea.scrollTop = oldScrollTop;
tarea.focus();
} else {
document.forms['inputform'].elements[elname].value += what;
document.forms['inputform'].elements[elname].focus();
}
}
function makerequest(serverPage, objID) { //show loading gif only if ajax is working on specific Objects switch(objID){ //add aditional case DivID's here - for future updates //not all ajax updates require loading to be shown. case 'Shoutbox-results': showLoading(objID); break; } //check for a valid Internet Explorer instance. var xmlhttp = false; //using IE. try { //Javascript version is greater than 5. xmlhttp = new ActiveXObject("Msxml2.XMLHTTP"); } catch (e) { //older active x object. try { //using Internet Explorer. xmlhttp = new ActiveXObject("Microsoft.XMLHTTP"); } catch (E) { //non-IE browser. xmlhttp = false; } } //non-IE browser, create a javascript instance of the object. if (!xmlhttp && typeof XMLHttpRequest != 'undefined') { xmlhttp = new XMLHttpRequest(); } var obj = document.getElementById(objID);
xmlhttp.open("GET", serverPage);
xmlhttp.onreadystatechange = function() {
if (xmlhttp.readyState == 4 && xmlhttp.status == 200) {
obj.innerHTML = xmlhttp.responseText;
}
}
xmlhttp.send(null);
}
function showLoading (objID){ hidden = document.getElementById(objID); hidden.innerHTML = '<div align="center"><img src="/shoutbox/images/ajax/throbber.gif" alt="Loading" align="middle" /></div>'; }
function textCounter(field, countfield, maxlimit) { if (field.value.length > maxlimit) // if too long…trim it! field.value = field.value.substring(0, maxlimit); // otherwise, update 'characters left' counter else countfield.value = maxlimit - field.value.length; }
function reloadShoutbox() { makerequest('http://www.hellboundhackers.org/shoutbox/shoutbox_result.php', 'Shoutbox-results'); interval = setInterval('reloadShoutbox()', 10000); } mkay did that so uh is this the j script ijection or did i just find a exploit?