CVE:CVE-2008-4335
CNNVD:CNNVD-200809-425
Atomic Photo Album是一款基于PHP和MYSQL实现的像册程序。
Atomic Photo Album (APA) 1.1.0pre4的album.php中存在跨站脚本漏洞，远程攻击者可以通过apa_album_ID参数注入任意的WEB脚本或HTML.
solution:Upgrade atomic_photo_album atomic_photo_album to a higher version than 1.1.0_pre4,and avoid the version 1.1.0_pre4