CVE:CVE-2005-1947
CNNVD:CNNVD-200506-078
Invision Gallery 1.3.1之前的版本中存在跨站请求伪造(CSRF)漏洞，远程攻击者通过(1)相册或(2)delimg操作的连接或IMG图片标签，以另一用户的身份删除相册或图片。
solution:Upgrade invision_power_services invision_gallery to a higher version than 1.0.1,1.3,and avoid the version 1.0.1,1.3