CVE:CVE-2009-4174
CNNVD:CNNVD-200912-041
Cute News 是PHP文本 文章/新闻系统。当magic_quotes_gpc失效时，CutePHP CuteNews 1.4.6版本和8b之前的UTF-8 CuteNews中的editnews模数使作为记者或编辑的远程验证用户可以通过修改doeditnews操作的id参数绕过管理和先前提交的条款编辑。
solution:Upgrade cutephp cutenews to a higher version than 1.4.6,and avoid the version 1.4.6; Upgrade korn19 utf-8_cutenews to a higher version than 8,and avoid the version 8