CVE-2002-0491: Alguest

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileges by setting the admin cookie to an arbitrary value.

Affected products

• Alguest Alguest: version 1.0 only

Published 2002-08-12. Last modified 2026-06-16.