CVE:CVE-2005-3986
CNNVD:CNNVD-200512-057
Instant Photo Gallery 1及之前版本存在多个SQL注入漏洞。远程攻击者可以通过 (1) portfolio.php中的cat_id 参数和(2)content.php中的cid参数，执行任意SQL指令。
solution:Upgrade verosky_media instant_photo_gallery to a higher version than 1,and avoid the version (,1]