CVE-2009-4584

HIGH 7.5CVE-2009-4584 · Published 06/01/2010 · updated 16/06/2026

In short

CVE-2009-4584 is a HIGH (CVSS 7.5) vulnerability affecting db masters multimedia links directory (dbmasters).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db masters multimedia links directory dbmasters	`= 3.1.3`	No fix yet

Description

admin.php in dB Masters Multimedia Links Directory 3.1.3 allows remote attackers to bypass authentication and gain administrative access via a certain value of the admin_log cookie.

References

packetstormsecurity.org/0912-exploits/dbmastersmm-insecure.txt · Exploit
secunia.com/advisories/37985 · Vendor Advisory
osvdb.org/61393
securityfocus.com/bid/37517 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free