CVE-2008-5075 | BDVDB-2026-33397 Detail

Description#

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to (g) browser.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/45487
http://securityreason.com/securityalert/4596
https://www.exploit-db.com/exploits/6596
http://www.securityfocus.com/bid/31445

Exploit#

https://www.exploit-db.com/exploits/6596

History#

Version 12008-11-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.