CVE:CVE-2008-0391
CNNVD:CNNVD-200801-340
aliTalk 1.9.1.1的inc/elementz.php不会合理地修改权限，这会允许远程攻击者通过lilil 参数，ubild和pa参数来加入任意用户帐户。
solution:Upgrade alilg alitalk to a higher version than 1.9.1.1,and avoid the version 1.9.1.1