CVE:CVE-2007-4958
CNNVD:CNNVD-200709-227
TinyWebGallery (TWG)存在多个跨站脚本攻击漏洞，远程攻击者可以借助(1) index.php, (2) i_frames/i_login.php,和(3) i_frames/i_top_tags.php的URL注入任意web脚本或HTML。
solution:Upgrade tinywebgallery tinywebgallery to a higher version than 1.6.3.4,and avoid the version 1.6.3.4