CVE:CVE-2005-4799
CNNVD:CNNVD-200512-789
Yet Another PHP Image Gallery (YaPIG) 0.95b及更早版本中存在多个跨站脚本攻击漏洞，远程攻击者可以通过(1)在"图片相关评论"中的主页字段(又称网站字段)和(2)在view.php中的img_size字段来注入任意Web脚本或HTML。
solution:Upgrade yapig yapig to a higher version than 0.95b,0.92b,0.93u,0.94u,0.95,and avoid the version (,0.95b],0.92b,0.93u,0.94u,0.95