CVE-2011-2944
published 2014-08-12CVE-2011-2944: SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username…
PriorityP349high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.68%
84.0th percentile
SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| megalab | the_uploader | <= 2.0.4 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/79508http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.htmlhttp://secunia.com/advisories/48141http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-releasedhttp://www.exploit-db.com/exploits/18518http://www.securityfocus.com/bid/52156https://exchange.xforce.ibmcloud.com/vulnerabilities/73471http://osvdb.org/79508http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.htmlhttp://secunia.com/advisories/48141http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-releasedhttp://www.exploit-db.com/exploits/18518http://www.securityfocus.com/bid/52156https://exchange.xforce.ibmcloud.com/vulnerabilities/73471
2014-08-12
Published