EUVD-2008-4317

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

Sql injection

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...