CVE-2006-2993: Undefined Security Weakness

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...