CVE:CVE-2012-5304
CNNVD:CNNVD-201210-053
YVS Image Gallery是一款基于WEB的图库程序。 
YVS Image Gallery中的administration/install.php中存在静态代码注入漏洞。远程攻击者可利用该漏洞通过未明向量，注入任意PHP代码到functions/db_connect.php脚本。
solution:Upgrade yuriy_v_semenikhin yvs_image_gallery to a higher version than -