TextAds 2.08 Cross Site Scripting

`  
  
  
  
===========================================================================  
# TextAds 2.08 Script Cross Site Scripting Vulnerability  
===========================================================================  
###########################################################################  
# Name: TextAds 2.08 Script Cross Site Scripting Vulnerability  
# Vendor: http://idevspot.com/TextAds2.php  
# Price: $49.95  
# Date: 2011-04-14  
# Author: Ashiyane Digital Security Team  
# Thanks to: 1337day.com,Securityreason.com,packetstormsecurity.com,  
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com  
# Home: www.ashiyane.org/forums/  
###########################################################################  
###########################################################################  
  
[+] Dork: intext:"Powered by TextAds 2.08"   
  
###########################################################################  
  
[+] Vulnerability: / Title Field /  
  
[+] Note: At First Register in Site , Go To "NewAds" Then in Title Field  
Put Your Script !   
Result : Administrator After Checking "Campagin Ads" Your   
Script'll Run So > You Can Steal Admin Cookie !  
Seem's Have more Vulnerability but i didn't Check it YET !  
  
[+] Demo: http://idevspot.com/demo/textads_2  
  
[+] Demo: http://www.youtube.com/watch?v=gKhicG4Aqek  
  
###########################################################################  
===========================================================================  
# Gr33tz:  
# Ashiyane Members : BehroozIce,Q7x,,Virangar,Iman_taktaz,Keivan,Ali_eagle  
# Taghva,M3QD4D,PrinceOfHacking,Hidden-Hunter,Root3r,elvator,unique2world  
# Gladiator,Wahid,Encoder,mmilad200,n3me3iz,Classic,r3d.z0n3,injector,fr0nk  
# mzhacker,zend,milad-bushehr,aliakh,__amir__,anti206,ruin3r,Hijacker,Rz04  
# &  
# 1337 Member: r0073r,Side^effects,r4dc0re,eidelweiss,SeeMe,agix,gunslinger  
# Sn!pEr.S!te,indoushka,Knockout,ZoRlu,AnT!-Tr0J4n,eXeSoul,  
===========================================================================  
# DisCovered By XroGuE !!!  
  
`