Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1.
- https://www.exploit-db.com/exploits/6579
No PoCs found on GitHub currently.