[VIM] Bugtraq 23534

[George A. Theall]

Anybody seen the advisory for Bugtraq 23534 yet? It supposedly involves 
a remote file include issue in the Gallery script from Simple PHP 
Scripts and is from SekoMirza, one of the "researchers" who covered a 
similar "issue" in Ivan Gallery (Bugtraq 23519).

The new Bugtraq entry claims the flaw involves the 'textFile' parameter 
of the 'gallery_top.inc.php' script from Simple PHP Scripts Gallery 0.3. 
There is no such file included in the distribution nor does a grep of 
any of the files for 'textFile' or 'textfile' turn up anything.

So, where's the mistake? In the Bugtraq entry itself? With SekoMirza? Or 
perhaps just on my end?

George
-- 
theall at tenablesecurity.com