Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Dutchmonkey Clear all filters
TI-2009-02289 CVE-2009-2399 · GHSA-p7pf-x444-qg77

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager…

Priority LOW 33

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE para…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01689 Published 2009-07-09 No fix listed CWE-94
TI-2009-02286 CVE-2009-2396 · GHSA-xxf8-w472-5r42

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used…

Priority MEDIUM 49

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE paramete…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05942 Published 2009-07-09 No fix listed CWE-94
TI-2009-01656 CVE-2009-1741 · GHSA-fpw9-w78g-pvvx

Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when…

Priority LOW 34

Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01941 Published 2009-05-20 No fix listed CWE-89