CVE-2010-4284

Samsung Data Management Server (DMS) before 1.4.3 uses an integrated web server with an authentication form vulnerable to SQL injection, enabling remote attackers to bypass authentication and gain administrative access via unspecified vectors. Affected versions include 1.3.3, 1.4.1, and 1.4.2; Sa...