CVE-2009-2040

Name of the Vulnerable Software and Affected Versions Grestul version 1.2

Description The issue allows remote attackers to bypass authentication and create administrative accounts. This is achieved by sending a direct request with a manage admin action to the "admin/options.php" endpoint.

Recommendations For Grestul version 1.2, restrict access to the "admin/options.php" endpoint to prevent unauthorized requests, and consider implementing proper authentication mechanisms to prevent bypassing of authentication.