CVE:CVE-2005-1225
CNNVD:CNNVD-200505-421
Coppermine Photo Gallery 1.3.2中存在SQL注入漏洞，允许远程攻击者通过(1)init.inc.php或(2)zipdownload.php的favs参数来执行任意SQL命令。
solution:Upgrade coppermine coppermine_photo_gallery to a higher version than 1.3.2,and avoid the version 1.3.2