CVE:CVE-2009-2291
CNNVD:CNNVD-200907-024
当用户在邮箱注册时，LoginToboggan 6.x-1.5版本和之前的6.x-1.x版本存在未知漏洞，允许远程未授权用户借助未知向量而绕过设置的访问限制。
solution:Upgrade chad_phillips logintoboggan to a higher version than 6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.x,6.x-2.x,and avoid the version 6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.x,6.x-2.x