admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting the user cookie to "demo."
- https://www.exploit-db.com/exploits/6954
No PoCs found on GitHub currently.