CVE-2009-1741: SQL Injection
Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1741?
CVE-2009-1741 is considered to have a high severity rating due to its potential for allowing unauthorized SQL command execution.
How do I fix CVE-2009-1741?
To fix CVE-2009-1741, you should upgrade DM FileManager to version 3.9.2 or apply available patches that mitigate SQL injection vulnerabilities.
What types of vulnerabilities are associated with CVE-2009-1741?
CVE-2009-1741 is associated with multiple SQL injection vulnerabilities specifically in the login.php file.
Who is affected by CVE-2009-1741?
Users of DM FileManager version 3.9.2, particularly those with magic_quotes_gpc disabled, are affected by CVE-2009-1741.
What are the attack vectors for CVE-2009-1741?
The attack vectors for CVE-2009-1741 include manipulating the Username and Password fields during login to execute arbitrary SQL commands.