396

Picked up a legacy site to re-build, turns out just adding:

'?admin=1'

to the query string gave you full admin rights to the entire site without having to authenticate. The site was live for 2 years.

Comments
Add Comment