CVE:CVE-2007-2595
CNNVD:CNNVD-200705-233
RSAuction 允许远程认证用户借助一个对激活的URL的直接请求，从Suspended to Active中移除他们的账户。当用户进行账户注册时，该URL会提供给用户。
solution:Upgrade rscript rsauction to a higher version than 2.73.1.3,and avoid the version 2.73.1.3