ARASTAR Portal System Cross Site Scripting

`ARASTAR Portal System (search.php) XSS Vulnerability  
  
Software : ARASTAR   
Date : 1/13/2012   
Vendor : http://www.ara-star.com   
Get App. : http://www.ara-star.com/sale.php?sale=3   
Price : $480   
Dork : site:*.il intext:"powered by ARASTAR"   
Author : ITTIHACK   
Home : http://ittihack.com   
  
  
Vulnerable File : Search.php  
  
Exploit : Use the dork above to find yours, go to the home page and post XSS code in (( search box ))  
Note; do not post it in the URL above, just in search box  
  
Examples : <script>alert(1337)</script>  
<center><h1> Found By ITTIHACK </h1></center>  
  
  
Demo Sites: http://radio.ara-star.com <-- Supporter  
http://aljalel.co.il  
http://alwan.co.il  
  
  
  
  
#Greatz to: ___ ____ ____  
#````______/```\__//```\__/____\  
#``_/```\_/``:```````````//____\  
#`/|``````:``:``..``````/ Reinie \   
#|`|`````::`````::``````\````````/  
#|`|`````:|`````||`````\`\______/  
#|`|`````||`````||``````|\``/``|  
#`\|`````||`````||``````|```/`|`\   
#``|`````||`````||``````|``/`/_\`\  
#``|`___`||`___`||``````|`/``/````\  
#```\_-_/``\_-_/`|`____`|/__/``````\  
#````````````````_\_--_/````\`````/   
#```````````````/____```````````/  
#``````````````/`````\`````````/  
#``````````````\______\_______/  
`