CERT.org wrote:CWE-302: Authentication Bypass by Assumed-Immutable Data - CVE-2016-9482 A remote unauthenticated user may bypass authentication to access the administrator panel by navigating directly to: /admin.php?mod=admin&func=panel
CWE-302: Authentication Bypass by Assumed-Immutable Data - CVE-2016-9482
A remote unauthenticated user may bypass authentication to access the administrator panel by navigating directly to:
/admin.php?mod=admin&func=panel
Just, like, wow.