CVE:CVE-2009-4828
CNNVD:CNNVD-201004-444
Ad Manager Pro (aka AdManagerPro)的administration/admins.php存在跨站请求伪造(CSRF)漏洞，远程攻击者可以通过admin_created操作劫持管理员认证，创建新的管理员用户。
solution:Upgrade phpwebscripts ad_manager_pro to a higher version than 3.0,and avoid the version 3.0