login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.

Published Jul 11, 2005 · Updated Sep 16, 2024 · Assigned by mitre