TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password possibly related to the Internet Explorer \Remember Me\ feature. NOTE: some of these details are obtained from third party information.