AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastracker_admin cookie to TRUE.
https://www.exploit-db.com/exploits/5615
https://exchange.xforce.ibmcloud.com/vulnerabilities/42435