CVE:CVE-2008-0246
CNNVD:CNNVD-200801-162
Uploadscript 1.0中的admin.php在设置新密码时不检查原始密码，这使得远程攻击者可以通过不需要通行证的操作中的pass参数来取得管理员特权。
solution:Upgrade uploadscript uploadimage to a higher version than 1.0,and avoid the version 1.0; Upgrade uploadscript uploadscript to a higher version than 1.0,and avoid the version 1.0