ZeeCareers 2x XSS / Authentication Bypass

`  
  
  
______ __ ______   
/\ == \ /\ \ /\ __ \   
\ \ __< \ \ \ \ \ \/\ \   
\ \_____\ \ \_\ \ \_____\   
\/_____/ \/_/ \/_____/   
  
01000010 01101001 01001111   
  
[#]----------------------------------------------------------------[#]  
#   
# [+] ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]  
#  
# // Author Info   
# [x] Author: bi0  
# [x] Contact: [email protected]   
# [x] Homepage : www.ssteam.ws  
# [x] Thanks: packetdeath,redking,Zer0flag,sp1r1t and ssteam.ws ...  
#  
# // Software Info   
# [x] Name : ZeeCareers v2x - PHP HR Manager Website  
# [x] Vendor : http://www.zeecareers.com/  
# [x] Version : 2x  
# [x] Price : 149.00 USD  
#  
[#]-------------------------------------------------------------------------------------------[#]  
#  
# [x] Exploit :   
#   
# [XSS]   
#  
# http://localhost/basic_search_result.php?title=[XSS]  
#  
# [Auth Bypass]  
#   
# http://localhost/jobseekers/editprofile.php  
# http://localhost/jobseekers/forgot.php  
# http://localhost/jobseekers/additionalfeatures.php  
#  
# [ And ]   
#   
# http://localhost/employers/editprofile.php  
# http://localhost/employers/employer_reg.php  
#  
#  
[#]------------------------------------------------------------------------------------------[#]  
  
#EOF   
_________________________________________________________________  
Keep your friends updated—even when you’re not signed in.  
http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_5:092010`