[The Real Slim Shady]

well i'm logged in as admin, was not too hard XD.

But I guess that was not the challenging part

That wasnt the challenge. That was to check your ability to google and to keep the complete skids out. that said... the whole app is vulnerable... Once your in there is a whole host of vulnerable scripts that would allow you greater challenges, sqli, rfi/lfi, etc.