CVE-2011-2944 in The Uploader

Summary

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 07/27/2011
• Disclosure: 08/12/2014
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.05825
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2944
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2944
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2944/