Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4vgp-rfx5-254x

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

EPSS

Процентиль: 82%
0.01661
Низкий

Связанные уязвимости

nvd
больше 16 лет назад

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

EPSS

Процентиль: 82%
0.01661
Низкий