EUVD-2011-2912

Malware in sbrugna...

EUVD-2009-4779

Malware in sbrugna...

CVE-2011-2944

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2011-2944

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2011-2944

CVE-2011-2944 affects MegaLab The Uploader prior to version 2.0.5. The login.php handling allows a SQL injection via the username parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD record lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complex...

CVE-2011-2944

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Directory traversal

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4816

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4816

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4816

CVE-2009-4816 describes a directory traversal vulnerability in MegaLab The Uploader 2.0, exploitable through the filename parameter in api/download_checker.php where “..” can be used to read arbitrary files. Affected: MegaLab The Uploader 2.0 (component: api/download_checker.php). Root cause: imp...