CVE:CVE-2008-1469
CNNVD:CNNVD-200803-378
Gallarific 1.1免费版并不要求对gadmin/中的(1)photos.php,(2)comments.php,和(3)gallery.php进行认证，远程攻击者可以借助一个直接请求，编辑对象。
solution:Upgrade gallarific gallarific to a higher version than 1.1,and avoid the version 1.1