CVE:CVE-2005-4245
CNNVD:CNNVD-200512-260
Snipe Gallery 3.1.4及更早版本中的search.php存在跨站脚本攻击漏洞，远程攻击者可以通过keyword参数来注入任意Web脚本或HTML。
solution:Upgrade snipegallery snipe_gallery to a higher version than 3.1.4,and avoid the version (,3.1.4]