[VIM] PhotoPost PHP 4.6.5 (ecard.php) SQL Injection Vulnerability

[George A. Theall]

Exploit DB 14453 talks about two SQL injection vulnerabilities in an  
old version of PhotoPost, the second involving the 'photo' parameter  
to the 'showphoto.php' script. It looks like BID 41946 was created  
based on the same advisory.

Isn't that issue the same as one reported by Digital Crab in 2004 and  
covered by CVE-2004-0239 / BID 9557?

George
-- 
theall at tenablesecurity.com