CVE-2008-5075

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...

CVE-2008-5075

Vulnerability: CVE-2008-5075 affects E-Uploader Pro 1.0 (Uploader PRO). When magic_quotes_gpc is disabled, multiple SQL injection flaws exist. Exploitable via the id parameter in img.php, file.php, mail.php, thumb.php, zip.php, and zipit.php, and via the view parameter in browser.php. Impact per ...