CVE:CVE-2006-2993
CNNVD:CNNVD-200606-232
My Photo Scrapbook 1.0及之前版本存在多个SQL注入漏洞。远程攻击者可以借助传给(1)Displayview.asp和(2)Details_Photo_bv.asp中的key参数，执行任意SQL命令。
solution:Upgrade my_photo_scrapbook my_photo_scrapbook to a higher version than 1.0,and avoid the version (,1.0]