CVE:CVE-2008-3511
CNNVD:CNNVD-200808-083
Softbiz Image Gallery是一套图片分类网站工具。
Softbiz Image Gallery (Photo Gallery)存在多个跨站脚本攻击漏洞。远程攻击者可以借助到admin/目录下的index.php,images.php, suggest_image.php,image_desc.php的latest参数，或admin/目录中index.php,adminhome.php,config.php,changepassword.php,cleanup.php,browsecats.php,images.php的msg参数，注入任意的web脚本或HTML。
solution:Upgrade softbiz image_gallery to a higher version than *