CVE:CVE-2006-1127
CNNVD:CNNVD-200603-130
在Gallery 2至2.0.2中存在跨站脚本攻击(XSS) 漏洞，远程攻击者可以通过以下途径，注入任意Web脚本或HTML：X-Forwarded-For (X_FORWARDED_FOR) HTTP头，当增加一条评论到照片簿中时不能正常运行。
solution:Upgrade gallery_project gallery to a higher version than 2.0,2.0.1,2.0.2,2.0_alpha,2.0_alpha1,2.0_alpha2,2.0_alpha3,2.0_alpha4,2.0_beta1,2.0_beta2,2.0_beta3,and avoid the version 2.0,2.0.1,2.0.2,2.0_alpha,2.0_alpha1,2.0_alpha2,2.0_alpha3,2.0_alpha4,2.0_beta1,2.0_beta2,2.0_beta3