CVE-2009-2025

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID…

published June 9, 2009

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02610 · 85.3th percentile
Published
2009-06-09T19:00Z
EPSS history
Timeline
  • 09 JUN 19:00Z
    admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID…
    cvelistv5