check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication.
- http://www.evuln.com/vulns/60/summary.html
No PoCs found on GitHub currently.