#6 BIG GAPING SECURITY HOLE

[Anonymous]

Is it just me who is really stupid, or is there a big
security hole in adduser.php3 when using it in
moderated mode? Forget about the password and enter
"http://server/myphpim/adduser.php3?light=green" in
the URL, and you have admin rights.