Crackers_Child has reported a vulnerability in Post Comments Script, which can be exploited by malicious people to bypass certain security restrictions.

The problem is that the application allows access to the admin interface by checking if a certain cookie exists. This can be exploited to gain administrative access to the application by creating the cookie "PostCommentsAdmin" and assigning it the value "logged".

Solution
Ensure that proper access restrictions are implemented.

Provided and/or discovered by
Crackers_Child

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area