[Plugin: PhotoContest Plugin] Multiple security leaks

I did not review the whole plugin, just login.php where I have found a XSS leak and view.php as well as viewimg.php where SQL injection leaks are located. Most propably there are even more leaks as this plugin seems to be from an inexperienced PHP programmer.

See http://www.reneschmidt.de/wpphotocontest/