CVE:CVE-2006-4427
CNNVD:CNNVD-200608-449
eFiction 2.0.7之前的版本的index.php脚本允许远程攻击者通过将(1) adminloggedin参数，(2) loggedin参数和 (3) level参数设为"1"，绕过认证并获取特权。
solution:Upgrade efiction efiction to a higher version than 1.0,1.1,2.0,2.0.6,and avoid the version 1.0,1.1,2.0,2.0.6