admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary search_cookie cookie.
- http://securityreason.com/securityalert/4042
- https://www.exploit-db.com/exploits/6066
No PoCs found on GitHub currently.