CVE:CVE-2009-1032
CNNVD:CNNVD-200903-351
YABSoft Advanced Image Hosting (AIH) Script 2.3版本的gallery_list.php中存在SQL注入漏洞。远程攻击者可以借助gal参数，执行任意SQL指令。
solution:Upgrade yabsoft advanced_image_hosting_script to a higher version than 2.3,and avoid the version 2.3