Description
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp.
References
- ADV-2006-2244 vdb-entry
- http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html
- 26282 vdb-entry
- myphoto-displayview-sql-injection(27087) vdb-entry
- 26281 vdb-entry
- 20554 third-party-advisory
- 18418 vdb-entry