CVE:CVE-2008-2817
CNNVD:CNNVD-200806-307
NiTrO Web Gallery 1.4.3 及其早期版本的albums.php中存在SQL注入漏洞，远程攻击者通过一个show操作中的CatId参数来执行任意SQL命令。
solution:Upgrade nitropowered nitro_web_gallery to a higher version than 1.4.3,and avoid the version (,1.4.3]