CVE-2006-3772: Undefined Security Weakness

PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookieuser setting in the login cookie...