Bitrix suffers from a cross site scripting vulnerability.
385dc01086edf46be270c646d5bfb09f66cd8761465887d6343c7444c57a1907
# Exploit Title: Bitrix Cross Site Scripting
# Date: 3.08.2011
# Author: Sony
# Software Link: http://www.1c-bitrix.ru/
# POC: http://st2tea.blogspot.com/2011/09/bitrix-cross-site-scripting.html
..................................................................
[templates:gameshowroom]
Demo:
http://partner.alawar.pl
Rejestracja:
http://partner.alawar.pl/signup.php
Opcje:
http://partner.alawar.pl/vitr/config/
Put our code in the Imiê or Telefon and save..
Our code:
http://codepad.org/UAjoOyaL
Demo Video:
http://www.youtube.com/watch?v=rllYlZT5iqE