CVE:CVE-2010-0979
CNNVD:CNNVD-201003-220
Obsession-Design Image-Gallery (ODIG)的display.php脚本中存在跨站脚本攻击漏洞。远程攻击者可以借助folder参数注入任意的web脚本或HTML。
solution:Upgrade obsession-design image-gallery to a higher version than 1.1,and avoid the version 1.1