CVE:CVE-2008-7179
CNNVD:CNNVD-200909-087
OTManager CMS 2.4版本允许远程攻击者通过把ADMIN_Hora，ADMIN_Logado和ADMIN_Nome cookies设置成特定值，来绕过身份认证和获得管理员特权。它们可在Admin/index.php中获得。
solution:Upgrade otmanager otmanager_cms to a higher version than 2.4,and avoid the version 2.4