CVE:CVE-2007-5988
CNNVD:CNNVD-200711-219
BtiTracker 1.4.4中的blocks/shoutbox_block.php不能正确确认用户账户,远程攻击者借助修改的nick字段以任何用户身份获得shoutbox进入权。
solution:Upgrade bti-tracker bti-tracker to a higher version than 1.4.4,and avoid the version (,1.4.4]