Jamroom Cross Site Scripting

`# Exploit Title: Jamroom Cross Site Scripting  
# Date: 19.02.2012  
# Author: Sony  
# Software Link: http://www.jamroom.net  
# Google Dorks: Powered by Jamroom  
# Web Browser : Mozilla Firefox  
# Blog : http://st2tea.blogspot.com  
# PoC:  
http://st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html  
..................................................................  
  
Demo1:  
  
http://demo.jamroom.net/login.php  
http://www.jamroom.net/pages/jamroom-demo-systems  
  
Version 4.2.6  
  
We have persistent xss in the Jamroom.  
  
Status Update-->put our code and save this.  
  
Refresh page and..enjoy!  
  
http://3.bp.blogspot.com/-skYTR8jOaDw/T0AZNB1AzvI/AAAAAAAAAiM/NqzMjq5q6Ko/s1600/status1.JPG  
  
http://2.bp.blogspot.com/-CEeE008RiYE/T0AZQNdzCCI/AAAAAAAAAiY/f7sMtsuy9l4/s1600/status2.JPG  
  
Demo2:  
  
Version 4.2.4  
  
http://beatbattle.com/  
  
http://3.bp.blogspot.com/--d-84OccpGo/T0AaTzCd1NI/AAAAAAAAAik/ogyze1yjAEk/s1600/beatbattle.JPG  
`