CVE:CVE-2005-3395
CNNVD:CNNVD-200511-008
一个用于Invision Power Board 的强大完整功能相册系统，简单易用。
Invision Gallery 2.0.3中的SQL注入漏洞可让远程攻击者通过st参数执行任意SQL命令。
solution:Upgrade invision_power_services invision_gallery to a higher version than 2.0.3,and avoid the version 2.0.3