2005-07-11 04:00:00
mitre
PUBLISHED
login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.