CVE-2011-2944

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• The Uploader 2.0.4 (English/Italian) - Arbitrary File Upload / Remote Code Execution (Metasploit)2012-02-23 · webapps · php

Impact

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/79508
• http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.html
• http://secunia.com/advisories/48141
• http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-released
• http://www.exploit-db.com/exploits/18518
• http://www.securityfocus.com/bid/52156
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73471
• http://osvdb.org/79508
• http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.html
• http://secunia.com/advisories/48141
• http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-released
• http://www.exploit-db.com/exploits/18518
• http://www.securityfocus.com/bid/52156
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73471