Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the login cookie to 1.
- https://www.exploit-db.com/exploits/6500
No PoCs found on GitHub currently.