• info
• discussion
• exploit
• solution
• references

XGB Authentication Bypass Vulnerability

No exploit is required and the following proof of concept is available:
http://www.example.com/xGB.php?act=admin&do=edit