PhotoPost PHP Pro 3.x/4.x showgallery.php Multiple Parameter SQL Injection

ID SSV:77630
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


Multiple SQL injection, cross-site scripting and HTML injection vulnerabilities have been identified in the application, which may allow an attacker to execute arbitrary HTML or script code in a user's browser and/or influence SQL query logic to disclose sensitive information and carry out other attacks. 

Photopost PHP Pro 4.6.0 and prior may be prone to these issues. Photopost PHP Pro 4.8.1 is reported vulnerable to these issues as well.'%20UNION%20SELECT%200,email,