CVE-2008-1426
SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via the albumid parameter.
Date published : 2008-03-20
http://www.securityfocus.com/bid/28306
http://www.securityfocus.com/archive/1/489891/100/0/threaded