info
discussion
exploit
solution
references
DM FileManager 'Username' and 'Password' SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
The following example input is available:
Username: ' or '1=1
Password: ' or '1=1
Privacy Statement
Copyright 2010, SecurityFocus