⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2011-2944

HIGH · 7.5 CVSS Gepubliceerd: 12-08-2014 CWE-89

Beschrijving

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Vendors

Megalab

Affected products

The Uploader

References

osvdb.org
packetstormsecurity.org
secunia.com
sourceforge.net
www.exploit-db.com
www.securityfocus.com
exchange.xforce.ibmcloud.com