CVE:CVE-2009-4039
CNNVD:CNNVD-200911-219
Piwigo 2.0.6之前版本中存在跨站脚本攻击漏洞。远程攻击者可以借助未明参数，注入任意的web脚本或HTML。
solution:Upgrade piwigo piwigo to a higher version than 2.0.5,2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,and avoid the version (,2.0.5],2.0.0,2.0.1,2.0.2,2.0.3,2.0.4