Auth bypass in Mole-Group Gastro Portal \(Restaurant Directory\) Script
CVE-2009-4675
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.
Vulnerability class: Broken Authentication
EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.
Affected products
- Mole-group Gastro_portal_\(restaurant_directory\)_script
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)