CVE-2009-2040

Grestul 1.2 - Auth Bypass

Title source: llm

Description

admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ThE g0bL!N · htmlwebappsphp
https://www.exploit-db.com/exploits/8902

Scores

EPSS 0.0289
EPSS Percentile 86.2%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

grestul/grestul

Timeline

Published Jun 12, 2009
Tracked Since Feb 18, 2026