CVE:CVE-2006-6937
CNNVD:CNNVD-200701-231
Xtreme ASP Photo Gallery的displaypic.asp中存在SQL注入漏洞。远程攻击者可以借助sortorder参数，注入任意的SQL指令。
solution:Upgrade pensacola_web_designs xtremeasp_photogallery to a higher version than 2.0,and avoid the version 2.0