CVE:CVE-2009-4671
CNNVD:CNNVD-201003-061
RoomPHPlanning的脚本Login.php存在授权问题漏洞。远程攻击者可以借助设置与管理账户相关联的值的room_phplanning cookie，绕过认证获取管理员访问权限。
solution:Upgrade beaussier roomphplanning to a higher version than 1.6,and avoid the version 1.6