CVEvulnerability
CVE-2009-2025
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.
Affected configurations
• dutchmonkey dm filemanager 3.9.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/35167 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1532 Vendor Advisory
- https://www.exploit-db.com/exploits/8903 www.exploit-db.com
- http://secunia.com/advisories/35167 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1532 Vendor Advisory
- https://www.exploit-db.com/exploits/8903 www.exploit-db.com