Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.
- https://www.exploit-db.com/exploits/3859
No PoCs found on GitHub currently.