Secunia Security Advisory – Russ McRee has reported some vulnerabilities in photokorn, which can be exploited by malicious people to conduct cross-site scripting, cross-site request forgery, and SQL injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/80105/sa36150.txt
Source: https://packetstormsecurity.com/files/80105/Secunia-Security-Advisory-36150.html