PHP-Nuke versions 6.x through 7.2 have a flaw that allows for administrator level authentication bypass.