G00db0y has reported a vulnerability in PhotoPost PHP Pro, allowing malicious people to view or manipulate data.

The problem is that the "photo" parameter in "showphoto.php" isn't properly verified, which can be exploited to manipulate SQL queries by injection arbitrary SQL code.

Version 4.6 and prior have been reported vulnerable.

Solution
The vendor has reportedly published a patch.
Further details available in Customer Area

Provided and/or discovered by
G00db0y, Zone-h Security Labs.

Original Advisory
http://www.zone-h.org/en/advisories/read/id=3844/

Deep Links
Links available in Customer Area