CVE:CVE-2006-1126
CNNVD:CNNVD-200603-152
Gallery 2至2.0.2可以让远程攻击者通过一个修改的X-Forwarded-For (X_FORWARDED_FOR) HTTP头进行IP地址欺骗，Gallery在其它更可靠的IP地址信息来源(如REMOTE_ADDR)之前要对该地址进行检查。
solution:Upgrade gallery_project gallery to a higher version than 2.0.2,and avoid the version 2.0.2