CVE-2006-2993

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp.

Date published : 2006-06-12

http://www.securityfocus.com/bid/18418

http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html