system
Describe <CVE-2008-4370>.
user
What is <CVE-2008-4370>?
assistant
Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php..