CVE:CVE-2007-1603
CNNVD:CNNVD-200703-570
Weekly Drawing Contest 0.0.1版本的admin/contest.php允许远程攻击者借助一个直接的POST请求，绕过身份认证和注入新的contest信息到数据库。
solution:Upgrade weekly_drawing_contest weekly_drawing_contest to a higher version than 0.0.1,and avoid the version 0.0.1