InterPhoto Image Gallery 2.5.1 Cross Site Scripting

`HTTPCS Advisory : HTTPCS67  
Product : InterPhoto Image Gallery  
Version : 2.5.1  
Date : 2012-08-07  
Criticality level : Less Critical  
Description : A vulnerability has been discovered in InterPhoto Image Gallery,  
which can be exploited by malicious people to conduct cross-site scripting  
attacks. Input passed via the 'thisurl' parameter to '/login.php' is not  
properly sanitised before being returned to the user. This can be exploited to  
execute arbitrary HTML and script code in a user's browser session in context of  
an affected site.  
Page : /login.php  
Variables : thisurl=[VulnHTTPCS]  
Type : XSS  
Method : POST  
Solution :  
References : https://www.httpcs.com/advisory/httpcs67  
Credit : HTTPCS [Web Vulnerability Scanner]  
  
  
  
  
  
`