CVE-2006-4462

Gonafish.com LinksCaffe 2.0 and 3.0 expose an access control flaw that lets remote attackers obtain full administrator rights via a direct request to Admin/admin1953.php. The affected components are the LinksCaffe admin functions, and the root cause is improper restriction of administrator-area a...