CVE:CVE-2008-3736
CNNVD:CNNVD-200808-321
System Consultants La!Cooda WIZ 1.4.0及之前版本和SpaceTag LacoodaST 2.1.3及之前的版本存在多个跨站请求伪造漏洞。远程攻击者可以劫持任意认证用户身份，更改密码和配置。
solution:Upgrade spacetag lacoodast to a higher version than 2.1.3,and avoid the version (,2.1.3]; Upgrade system_consultants la_cooda_wiz to a higher version than 1.4.0,and avoid the version (,1.4.0]