CVE-2020-15906

This repository contains a Python script and writeup for CVE-2020-15906, an authentication bypass vulnerability in Tiki Wiki CMS Groupware versions 16.x to 21.1. The exploit brute-forces the admin account until it is locked, then bypasses authentication by submitting an empty password.

The repository contains a functional Python exploit for CVE-2020-15906, an authentication bypass vulnerability in Tiki Wiki CMS Groupware 16.x to 21.1. The exploit brute-forces the admin account until it is locked, then bypasses authentication by sending a login request without a password.