Description
Multiple vulnerabilities exist in Easy Photo Gallery, including SQL injection and cross-site scripting. Input parameters are insufficiently validated before being used in database queries and HTML output.
Impact
SQL injection allows attackers to extract or manipulate database contents. XSS vulnerabilities enable session hijacking and credential theft from site visitors and administrators.
Solution
Apply input validation and parameterized queries. Consider migrating to a actively maintained gallery application.