Jamroom Cross Site Scripting

# Exploit Title: Jamroom Cross Site Scripting
# Date: 19.02.2012
# Author: Sony
# Software Link: http://www.jamroom.net
# Google Dorks: Powered by Jamroom
# Web Browser : Mozilla Firefox
# Blog : http://st2tea.blogspot.com
# PoC:
http://st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html
..................................................................


Demo1:

http://demo.jamroom.net/login.php
http://www.jamroom.net/pages/jamroom-demo-systems

Version 4.2.6

We have persistent xss in the Jamroom.

Status Update-->put our code and save this.

Refresh page and..enjoy!

Demo2:

Version 4.2.4

http://beatbattle.com/

http://beatbattle.com/sonystyles/

Demo3:

Version 4.2.3

http://www.musicfast.com/sonystyles/