CVE:CVE-2008-0256
CNNVD:CNNVD-200801-227
Matteo Binda ASP Photo Gallery 1.0的多个SQL注入漏洞会允许远程攻击者经由(1)以下脚本的id 参数  (a) Imgbig.asp (b) thumb.asp,和(c) thumbricerca.asp 以及 (2) thumbricerca.asp的 ricerca参数来执行任意SQL命令。
solution:Upgrade matteo_binda asp_photo_gallery to a higher version than 1.0,and avoid the version 1.0