Elite Gaming Ladders 3.5 Cross Site Scripting

`  
  
  
[-] Elite Gaming Ladders v3.5 Multiple Vulnerabilities [-]  
  
  
---Date : 2010-06-19  
---Author : ahwak2000  
---Email : z.u5[at]hotmail.com  
[-] Script Info [-]  
---Home : http://eliteladders.com/  
  
[-] Vulnerability [-]  
  
  
http://site.com/[path]/stats.php?account=[SQL INj] XSS in porfile login and go to http://eliteladders.com/demo/manager.phpedit you profile Nationality : City/Town : go to profile.php?account=[your id]   
_________________________________________________________________  
Hotmail: بريد إلكتروني موثوق فيه ويتمتع بحماية Microsoft القوية من البريد العشوائي.  
https://signup.live.com/signup.aspx?id=60969  
  
`