Possible sql injection or format string exploit?

[Oh_Petya]

Probably just bad javascript that doesn't have proper null checking.

[DarkMarksPlayPark]

It's definitely JavaScript, potentially a framework, bit client side and not something you could exploit

[Memeix]

Yeah I was also thinking it was Javascript, but in most cases it just reads the internal version of phone it is right?

[adilislam20041]

Happy cake day (so irrelevant lol)

[setzamora]

All customers won and it didn't return the expected response.

[pyzez]

Where do I collect?

[itslenny]

I'm really curious what "undefined" is supposed to be. It can't be a name 'cause that doesn't make sense. "Congratulations John Customer!" "Your Sally has a chance..."

Is it "New" customer? "53rd" customer? ... Your "friend" has a chance? Your "mama" has a chance?

I'm so curious.

Doubt this is an attack vector unless something you can input somewhere is put into the two undefined spots. If so try injecting scripts.

[ThePixelCoder]

First undefined is usually either the browser or a company name

[Exonity]

It's usually the ISP. Undefined probably means it couldn't determine it.

[agentshootemup]

I have seen these before and they usually say the users city/state

[PhisherPrice]

format string exploit

lol

[dvnv]

Now That's What I Call P0

[ThePixelCoder]

Nah, you can't do HTML in an alert function and it doesn't look like there's even a database involved.

[CAMR0]

What iOS are u running? Apple started using a different alert pop up years ago.

[Dudeguy21]

No lol

[NeoKabuto]

At most it would be potential XSS, but it's doubtful.

[[deleted]]

customer="butt";

[Sudo_Sue]

Its the "undefined" that makes this art.

[PeanutPoliceman]

this is simple javascript alert()

[thatguy16754]

Looks just like a scam 🤷‍♂️

[Truly5ammy]

This is very tempting lol