CVE:CVE-2007-2822
CNNVD:CNNVD-200705-451
当register_globals被启用时，TutorialCMS 1.01及之前版本允许远程攻击者借助提交到(a)login.php,(b)headerLinks.php,(c)submit1.php,(d)myFav.php和(e)userCP.php的(1)loggedIn和(2)activated参数，绕过身份认证。
solution:Upgrade wavelink_media tutorialcms to a higher version than 1.01,and avoid the version (,1.01]