Grestul

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Grestul records in CISA KEV

No Grestul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Grestul 1 record LOW

Records

1 record in Grestul · all components

TI-2009-01948 CVE-2009-2040 · GHSA-jqcf-grp7-vr4j

admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote…

LOW 38

admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02933 Published 2009-06-12 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0