CVE:CVE-2005-4861
CNNVD:CNNVD-200512-957
Ragnarok Online Control Panel (ROCP) 4.3.4a中的functions.php使得远程攻击者可以通过请求带有的"/login.php" PHP_SELF结尾值的account_manage.php，而这是CHECK_AUTH函数不能正确处理的，从而绕过认证。
solution:Upgrade jasio.net ragnarok_online_control_panel to a higher version than 4.3.4a,and avoid the version 4.3.4a