CVE:CVE-2008-0292
CNNVD:CNNVD-200801-239
Dansie Photo Album 1.0的photo_album.pl中存在跨站脚本攻击漏洞。远程攻击者可以通过搜索参数，注入任意web脚本或HTML 。
solution:Upgrade dansie photo_album to a higher version than 1.0,and avoid the version 1.0