CVE-2009-2025

2009-06-0919:00:00

mitre

www.cve.org

7.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

References

secunia.com/advisories/35167

www.vupen.com/english/advisories/2009/1532

www.exploit-db.com/exploits/8903