Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4vgp-rfx5-254x

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

EPSS

Процентиль: 84%
0.0261
Низкий

Связанные уязвимости

nvd
около 17 лет назад

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.

EPSS

Процентиль: 84%
0.0261
Низкий