Security Advisory
CVE-2015-0914
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.