CVE:CVE-2008-4336
CNNVD:CNNVD-200809-426
Atomic Photo Album是一个 PHP/MySQL 相册，具有以下功能：无限数量的相册和照片、用户和评论、自动添加和删除照片、缩略图支持、多语言和主题。
Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apa_album_ID parameter.
solution:Upgrade constantin_charissis atomic_photo_album to a higher version than 1.1.0_pre4,and avoid the version 1.1.0_pre4