CVE:CVE-2008-4714
CNNVD:CNNVD-200810-423
Atomic Photo Album没有合适的处理apa_cookie_login和apa_cookie_password cookies，远程攻击者可以借助修改cookies来绕过身份认证和获得管理访问权限。
solution:Upgrade atomic_photo_album atomic_photo_album to a higher version than 1.1.0:pre4,and avoid the version 1.1.0:pre4