Log in as admin without knowing the password.
The application uses raw SQL queries. Find a way to bypass authentication.