CVE:CVE-2012-6039
CNNVD:CNNVD-201201-145
YABSoft Advanced Image Hosting (AIH)脚本2.3版本中的view_comments.php脚本中存在SQL注入漏洞。远程攻击者利用该漏洞通过gal参数，执行任意SQL命令。
solution:Upgrade yabsoft advanced_image_hosting_script to a higher version than -,2.3,and avoid the version 2.3