CVE:CVE-2006-1505
CNNVD:CNNVD-200603-485
在基本分析和安全引擎(BASE) 1.2.4 (melissa)之前版本中的base_maintenance.php，当处于standalone模式运行时，远程攻击者可能通过将standalone参数设置成"yes"以绕过身份验证程序。
solution:Upgrade basic_analysis_and_security_engine base to a higher version than 1.1.2_zora,1.1.3_lynn,1.1.4_cheryl,1.1_elizabeth,1.2.1_kris,1.2.2_cindy,1.2_betty,and avoid the version 1.1.2_zora,1.1.3_lynn,1.1.4_cheryl,1.1_elizabeth,1.2.1_kris,1.2.2_cindy,1.2_betty