CVE:CVE-2009-0461
CNNVD:CNNVD-200902-228
Whole Hog Password Protect 1.x加强版允许远程攻击者借助adminid cookie中的一个整数值，绕过身份认证和获得管理访问权限。
solution:Upgrade wholehogsoftware password_protect to a higher version than 1.0,and avoid the version 1.0