CVE-2011-2944

SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.

• CWE-89

• http://osvdb.org/79508
• http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.htmlExploit
• http://secunia.com/advisories/48141
• http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-releasedPatch, Vendor Advisory
• http://www.exploit-db.com/exploits/18518Exploit
• http://www.securityfocus.com/bid/52156Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73471
• http://osvdb.org/79508
• http://packetstormsecurity.org/files/110166/The-Uploader-2.0.4-Eng-Ita-Remote-File-Upload.htmlExploit
• http://secunia.com/advisories/48141
• http://sourceforge.net/p/theuploader/news/2011/07/the-uploader-205-releasedPatch, Vendor Advisory
• http://www.exploit-db.com/exploits/18518Exploit
• http://www.securityfocus.com/bid/52156Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73471

Published

Aug 12, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2938Multiple cross-site scripting (XSS) vulnerabilities in filte…
• CVE-2011-2939Off-by-one error in the decode_xs function in Unicode/Unicod…
• CVE-2011-2940stunnel 4.40 and 4.41 might allow remote attackers to execut…
• CVE-2011-2941Open redirect vulnerability in Red Hat JBoss Enterprise Port…
• CVE-2011-2942A certain Red Hat patch to the __br_deliver function in net/…
• CVE-2011-2943The irc_msg_who function in msgs.c in the IRC protocol plugi…
• CVE-2011-2945Heap-based buffer overflow in RealNetworks RealPlayer 11.0 t…
• CVE-2011-2946Unspecified vulnerability in an ActiveX control in RealNetwo…
• CVE-2011-2947Cross-zone scripting vulnerability in the RealPlayer ActiveX…
• CVE-2011-2948RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through…
• CVE-2011-2949Heap-based buffer overflow in RealNetworks RealPlayer 11.0 t…
• CVE-2011-2950Heap-based buffer overflow in qcpfformat.dll in RealNetworks…