SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
Configurations
History
No history.
Information
Published : 2014-08-12 20:55
Updated : 2023-12-10 11:31
NVD link : CVE-2011-2944
Mitre link : CVE-2011-2944
CVE.ORG link : CVE-2011-2944
JSON object : View
Products Affected
megalab
- the_uploader
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')