CVE:CVE-2008-6763
CNNVD:CNNVD-200904-511
Silentum LoginSys 1.0.0版本中的login2.php允许远程攻击者通过把logged_in cookie设置成该帐户的用户名，来绕过身份认证和访问任意帐户。
solution:Upgrade hypersilence silentum_loginsys to a higher version than 1.0.0,and avoid the version 1.0.0