Maian Gallery 2.0 SQL Injection / Header Injection

Maian Gallery version 2.0 suffers from remote SQL injection and HTTP response splitting vulnerabilities.