Flat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain limited access to an arbitrary user account via the fpb_username cookie.
- https://www.exploit-db.com/exploits/4705
No PoCs found on GitHub currently.