There is an admin console on this app. It is not linked and there is no authorization check - if you know (or guess) the path, you are in. Content discovery / wordlists help. Try the obvious one.
CWAP Prep Labs · HackXpert Coaching · The XSS Rat · authorized lab use only