Imagevue 2.8.9 XSS / Password Disclosure

`| # Title : Imagevue.v2.8.9 Multi Vulnerability  
| # Author : indoushka  
| # email : [email protected]   
| # Tested on: windows 8.1 Français V.(Pro)   
| # Download : http://www.dl.persianscript.ir/script/Imagevue.v2.8.9.PHP.NULL-DGT(PersianScript.ir).rar  
=======================================  
  
App Msg Error :  
  
http://public.te.ua/validator.php  
  
Xss :  
  
This vulnerability affects /Imagevue/imagevue.php  
  
URL encoded GET input stylesheet was set to color.css_999988'():;933560  
The input is reflected inside <script> tag between single quotes.  
  
Passwodr Disclosure :   
  
In the case of the protection of a folder or the site with a password  
you can Find encrypted Type SHA-1 her  
  
http://www.royalshow.co.za/old/gallery/content/folders.xml  
  
Phpinfo :  
  
http://royalshow.co.za/old/gallery/iv-includes/phpinfo.php  
  
vul web site :  
  
http://public.te.ua/iv-admin/ default pass and user admin/admin  
  
Greetz :   
jericho http://attrition.org & http://www.osvdb.org/ * packetstormsecurity.com * http://is-sec.org/cc/  
Hussin-X * Stake (www.v4-team.com) * D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * exploit4arab.net  
---------------------------------------------------------------------------------------------------------------  
`