Authorization

EkinBoard 1.1.0 and earlier, when registerglobals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the groups parameter to 2, as demonstrated via backup.php...