CVE-2009-1741 - Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields

Back Back to CVE browser

MEDIUM

Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields

Published May 20, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 1.94%

Description

Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://osvdb.org/54597
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/35167
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/35035
vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/8741
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/54597		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/35167		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/35035		vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/8741		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 20, 2009

Updated Aug 7, 2024

Reserved May 20, 2009

Link CVE-2009-1741

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1741

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1741