CVE:CVE-2008-2293
CNNVD:CNNVD-200805-236
Multi-Page Comment System (MPCS)1.0和1.1版本中的admin.php远程攻击者可以通过把CommentSystemAdmin cookie设置成1.绕过身份认证和获得特权。
solution:Upgrade tpvgames mpcs to a higher version than 1.0,1.1,and avoid the version 1.0,1.1