CVE-2011-2944 | BDVDB-2026-63063 Detail
Description#
SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/52156
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73471
- http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.html
- http://osvdb.org/79508
- http://secunia.com/advisories/48141
- http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-released
- http://www.exploit-db.com/exploits/18518
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.