admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie.
https://www.exploit-db.com/exploits/6062
https://exchange.xforce.ibmcloud.com/vulnerabilities/43749
http://www.maianscriptworld.co.uk/news.html
http://www.maianscriptworld.co.uk/free-php-scripts/maian-links/development/index.html