CVE:CVE-2008-6300
CNNVD:CNNVD-200902-595
Galatolo WebManager 1.3a版本允许远程攻击者通过设置(1)gwm_user和(2)对admin的gwm_pass cookies，绕过权限并获得管理访问权。
solution:Upgrade gwm galatolo_webmanager to a higher version than 1.3a,and avoid the version 1.3a