CVE:CVE-2009-4446
CNNVD:CNNVD-200912-383
phpInstantGallery中的admin.php存在跨站脚本漏洞，远程攻击者可以借助PATH_INFO注入任意web脚本或HTML。
solution:Upgrade ikemcg phpinstantgallery to a higher version than 1.1,and avoid the version 1.1