CVE:CVE-2006-2080
CNNVD:CNNVD-200604-541
Verosky Media Instant Photo Gallery 1.0.2中的portfolio_photo_popup.php 存在SQL注入漏洞。这使得远程攻击者可以借助于id参数执行任意SQL命令。在调用includes/functions/fns_std.php中的count_click 函数之前，id参数并未被清理。注意：此问题可导致跨站脚本攻击。
solution:Upgrade verosky_media instant_photo_gallery to a higher version than 1.0.2,and avoid the version 1.0.2