[VIM] PhotoPost PHP 4.8c (showgallery.php) Cross Site Scripting

[George A. Theall]

NassRawI posted to Bugtraq of a cross-site scripting in PhotoPost PHP  
4.8c involving the 'si' parameter of the 'showgallery.php' script (http://archives.neohapsis.com/archives/bugtraq/2011-03/0027.html 
). BID 46649 was created to track that even though the issue appears  
to be covered already by BID 12157. How come SecurityFocus didn't just  
update the older BID? Rob?


George
-- 
theall at tenablesecurity.com