Bitrix Cross Site Scripting

`# Exploit Title: Bitrix Cross Site Scripting  
# Date: 3.08.2011  
# Author: Sony  
# Software Link: http://www.1c-bitrix.ru/  
# POC: http://st2tea.blogspot.com/2011/09/bitrix-cross-site-scripting.html  
  
..................................................................  
  
[templates:gameshowroom]  
  
Demo:  
  
http://partner.alawar.pl  
  
Rejestracja:  
  
http://partner.alawar.pl/signup.php  
  
Opcje:  
  
http://partner.alawar.pl/vitr/config/  
  
Put our code in the Imiê or Telefon and save..  
  
Our code:  
  
http://codepad.org/UAjoOyaL  
  
Demo Video:  
  
http://www.youtube.com/watch?v=rllYlZT5iqE  
`