CVE:CVE-2009-2770
CNNVD:CNNVD-200908-188
PowerUpload 2.4版本允许远程攻击者借助为myadminname cookie设置的管理员的MIME编码值，绕过身份认证和获得特权。
solution:Upgrade powerupload powerupload to a higher version than 2.4,and avoid the version 2.4