EUVD-2011-2912

Malware in sbrugna...

EUVD-2009-4779

Malware in sbrugna...

CVE-2011-2944

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2011-2944

CVE-2011-2944 affects MegaLab The Uploader prior to version 2.0.5. The login.php handling allows a SQL injection via the username parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD record lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complex...

CVE-2011-2944: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

PT-2014-2134

Name of the Vulnerable Software and Affected Versions MegaLab The Uploader versions prior to 2.0.5 Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter in the login.php file. Recommendations For versions prior to 2.0.5, update to version 2.0.5...

CVE-2009-4816

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4816: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...