CVE:CVE-2006-6936
CNNVD:CNNVD-200701-206
Xtreme ASP Photo Gallery中存在跨站脚本攻击漏洞。远程攻击者可以借助提交到displaypic.asp的(1)catname参数或(2)搜索字段，注入任意的HTML或web脚本。
solution:Upgrade pensacola_web_designs xtremeasp_photogallery to a higher version than 2.0,and avoid the version 2.0