SQL injection vulnerability in login.php in MegaLab The Uploader prior to 2.0.5 allows remote malicious users to execute arbitrary SQL commands via the username parameter.
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
def initialize(info = {})
super(update_info(info,
'Name' => 'The Uploader 204 (Eng/Ita) Remote File Upload',
'Description'=> %q{
This module exploits various flaws in The Uploader to upload a ...
Vulmon