CVE-2008-2449: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gallery parameter to a index.php and b image.php, and the 2 imgnum parameter to image.php. NOTE: the provenance of this information is...