CVE:CVE-2008-7024
CNNVD:CNNVD-200908-322
Arz Development The Gemini Portal 4.7以及之前的版本中的admin.php允许远程攻击者通过把用户cookie设置成admin以及设置到用户的名字参数，来绕过身份认证和获得管理员特权。
solution:Upgrade arzdev gemini_lite to a higher version than 3.5,3.6,and avoid the version 3.5,3.6; Upgrade arzdev gemini_portal to a higher version than 4.7,and avoid the version 4.7