CVE:CVE-2009-3833
CNNVD:CNNVD-200911-014
TFTgallery 0.13版的index.php中的跨站脚本(XSS)漏洞允许远程攻击者借助专辑参数，注入任意web脚本或HTML。
solution:Upgrade tftgallery tftgallery to a higher version than 0.13,and avoid the version 0.13