CVE:CVE-2007-6546
CNNVD:CNNVD-200712-344
RunCMS使用一个可预言的session id(a predictable session id),更易于远程攻击者借助一个修改的id攻击session。
solution:Upgrade runcms runcms to a higher version than 1.6,and avoid the version (,1.6]