Geraldoalcantara

The issue allows attackers to access unauthorized pages and execute administrative functions without authenticating, due to incorrect access control.

A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization.