CVE:CVE-2006-4421
CNNVD:CNNVD-200608-448
Yet Another PHP Image Gallery (YaPIG) 0.95b中template/default/thanks_comment.php脚本存在跨站脚本攻击(XSS)漏洞，远程攻击者可借助D_REFRESH_URL参数注入任意Web脚本或HTML。
solution:Upgrade yapig yapig to a higher version than 0.95b,and avoid the version 0.95b