EIP-2026-111423

This writeup describes an arbitrary authentication vulnerability in PostCard 1.0 due to insecure cookie handling. The attacker can set a cookie with the value 'logged_in=1' to bypass authentication and access the admin panel.