onefilecms.php in OneFileCMS through 2012-04-14 might allow malicious users to conduct brute-force attacks via the onefilecms_username and onefilecms_password fields.
onefilecms onefilecms