The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 …

A critical vulnerability in Samsung's MagicInfo9 Server allows unauthorized database access through hardcoded credentials. The hardcoded database account and password enable attackers to login and manipulate the database directly. This vulnerability affects MagicINFO 9 Server versions prior to 21.1090.1. The issue represents a significant security flaw as it provides direct database access without proper authentication. Organizations using affected versions should upgrade immediately to prevent unauthorized data manipulation.