admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting the ID_ADMIN and SUPER_ADMIN parameters to 1.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jacome_php-revista | Longino | 1.1.2 (including) | 1.1.2 (including) |