Authentication flaw

2009-06-0919:30:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

CPENameOperatorVersion
dm_filemanagereq3.9.2

CPE	Name	Operator	Version
	dm_filemanager	eq	3.9.2

References

secunia.com/advisories/35167

www.vupen.com/english/advisories/2009/1532

www.exploit-db.com/exploits/8903