# Exploit Title: Jamroom Cross Site Scripting
# Date: 19.02.2012
# Author: Sony
# Software Link: http://www.jamroom.net
# Google Dorks: Powered by Jamroom
# Web Browser : Mozilla Firefox
# Blog : http://st2tea.blogspot.com
# PoC:
http://st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html
..................................................................
Demo1:
http://demo.jamroom.net/login.php
http://www.jamroom.net/pages/jamroom-demo-systems
Version 4.2.6
We have persistent xss in the Jamroom.
Status Update-->put our code and save this.
Refresh page and..enjoy!
http://3.bp.blogspot.com/-skYTR8jOaDw/T0AZNB1AzvI/AAAAAAAAAiM/NqzMjq5q6Ko/s1600/status1.JPG
http://2.bp.blogspot.com/-CEeE008RiYE/T0AZQNdzCCI/AAAAAAAAAiY/f7sMtsuy9l4/s1600/status2.JPG
Demo2:
Version 4.2.4
http://beatbattle.com/
http://3.bp.blogspot.com/--d-84OccpGo/T0AaTzCd1NI/AAAAAAAAAik/ogyze1yjAEk/s1600/beatbattle.JPG
