CVE:CVE-2009-1767
CNNVD:CNNVD-200905-288
2daybiz Template Monster Clone的admin/edituser.php没有要求管理认证权限，这会允许远程攻击者可以借助(1)loginname,(2)password,(3)email,(4)firstname,或(5)lastname参数，更改任意帐户。
solution:Upgrade 2daybiz template_monster_clone to a higher version than -