Here's I was able to take over any user's account in a website. I have shared detailed information about it.