CVE:CVE-2008-0400
CNNVD:CNNVD-200801-349
Singapore 0.10.1的modern template 中的header.tpl.php存在的跨站脚本攻击漏洞。远程攻击者可以通过default.php的gallery参数，注入任意Web脚本或HTML。
solution:Upgrade modern modern to a higher version than 1.3.2,and avoid the version 1.3.2; Upgrade singapore singapore to a higher version than 0.10.1,and avoid the version 0.10.1