includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.
- https://www.exploit-db.com/exploits/8493
No PoCs found on GitHub currently.