CVE:CVE-2009-4674
CNNVD:CNNVD-201003-064
Mole Group Sky Hunter Airline Ticket Sale Script 和 Bus Ticket Script的脚本admin/admin.php存在多个远程密码变更漏洞。远程攻击者可以借助一个可修改的user_id域，更改任意的密码。
solution:Upgrade mole-group bus_ticket_script to a higher version than -; Upgrade mole-group sky_hunter_airline_ticket_sale_script to a higher version than -