The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges. Date published : 2005-07-27 http://www.securityfocu