ISMA Online Translator 1.2 / ISMA Agnet 1.1 Cross Site Scripting

`+------------------------------------------------------------------------------------------------------------+  
~~~~ISMA Online Translator + ISMA Agnet 1.1 XSS + HTML Injection~~~~  
+------------------------------------------------------------------------------------------------------------+  
Advisory : http://thefear.in/isma.txt || http://pastebin.com/uhjTXsts  
+------------------------------------------------------------------------------------------------------------+  
# Title : ISMA Online Translator XSS + HTML Injection  
# Author : AVATAR FEARLESS  
# Version : 1.1  
# Data : 2012-08-02  
# Vulnerability : On The Trasnlating Area  
# About : We can input XSS ++ HTML Inject & It Takes Some PHP Scripts.  
# Vulnerability Site : http://translator.am/  
+--------------------------------------------------+  
# Title : ISMA Online Translator Program XSS Vuln  
# Author : AVATAR FEARLESS  
# Version : 1.2  
# Vulnearbility Program : ISMA Agent 1.2  
# Vulnearbility Program Download : http://translator.am/setup/ISMAAgent1.2.exe  
# About Program : We Can Input XSS.  
# Data : 2012-08-02  
+--------------------------------------------------+  
{Site}  
[-] PoC :  
http://youtu.be/fQ7dm6vzglE  
http://s13.postimage.org/v8g2of4ja/fuckar.jpg  
http://s9.postimage.org/xa9ug1zpa/fuckar2.jpg  
http://s9.postimage.org/fzo11rxfi/fuckar3.jpg  
http://s14.postimage.org/hbey322ow/fuckar4.jpg  
[+] Description :  
We Can Post HTML Injection ++ XSS & Alsa Some PHP scripts  
{Program}  
[-] PoC :  
1. http://s11.postimage.org/ib6ci67he/adasdasdasda.jpg  
2. http://s12.postimage.org/ifsnbmyks/adasdasdasdsadasdasd.jpg  
3. http://youtu.be/o3MLRKU3flo  
[+] Description :  
WE Can Post XSS. + WE Can include Shell via XSS  
  
[@] Conact Me :  
[email protected]  
[email protected]  
R3SP3CT T0 :  
All My Bro*s  
& Anti-armenia Team  
  
  
Anti-armenia.ORG  
Anti-armenia.INFO  
Avatar Fearless  
+-----------------------------------------------------------------------+  
`