Approved changes feed: RSS · Atom

cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.2:*:*:*:*:*:*:*

part: a version: 3.9.2 update: *

VendorDutchmonkey (10a20449-5a7c-598b-a0a2-241c6bf84ecb)
ProductDm Filemanager (c67a7d04-b6df-590f-b38a-f7d112ad6e47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2025 vulnerable 2026-06-08 04:51:26.106057 Details available
admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.
Published: 2009-06-09T19:00:00.000Z
Updated: 2024-08-07T05:36:20.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1741 vulnerable 2026-06-08 04:51:24.683552 Details available
Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
Published: 2009-05-20T19:00:00.000Z
Updated: 2024-08-07T05:20:35.259Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.