CVE:CVE-2008-0288
CNNVD:CNNVD-200801-208
ImageAlbum 2.0.0b2的多个SQL注入漏洞会允许远程攻击者利用id来执行任意SQL命令。这些id在(1) classes/IADomain.PHP, (2) classes/IACollection.PHP和 (3) classes/IAUser.PHP中没有经过合适处理。
solution:Upgrade imagealbum imagealbum to a higher version than 2.0.0b2,and avoid the version 2.0.0b2