CVE:CVE-2007-2147
CNNVD:CNNVD-200704-379
Stephen Craton (又称WiredPHP) Chatness的admin/options.php没有检查管理证书，存在权限许可和访问控制漏洞。远程攻击者可以借助直接请求，读取和修改classes/vars.php和classes/varstuff.php配置文件。
solution:Upgrade stephen_craton chatness to a higher version than 2.5.3,and avoid the version (,2.5.3]