SQL Injection in Samsung Data_management_server

CVE-2010-4284

SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unsp…

Vulnerability class: SQL Injection

EPSS: 0.018 (75.8th percentile) — read the EPSS interpretation.

Affected products

Samsung Data_management_server — versions 1.3.3, 1.4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
cret@cert.org (US Government Resource, Patch, x_refsource_MISC)