CVE

Id
39176  
CVE No.
CVE-2009-1741  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430844 39176 CVE-2009-1741 MILW0RM:8741  View
430845 39176 CVE-2009-1741 URL:http://www.milw0rm.com/exploits/8741  View
430846 39176 CVE-2009-1741 BID:35035  View
430847 39176 CVE-2009-1741 URL:http://www.securityfocus.com/bid/35035  View
430848 39176 CVE-2009-1741 OSVDB:54597  View
430849 39176 CVE-2009-1741 URL:http://osvdb.org/54597  View
430850 39176 CVE-2009-1741 SECUNIA:35167  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42427 JVNDB-2009-003434 Armorlogic Profense Web Application Firewall におけるアクセス権を取得される脆弱性 Armorlogic Profense Web Application Firewall は、ディフォルトのルートパスワードハッシュを保持し、SSH 越しにパスワードベースのルートログインを許可するため、アクセス権を取得される脆弱性が存在します。 CVE-2009-1745 39176 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003434.html  View