The RockLoader malware tool suffers from remote shell upload and remote SQL injection vulnerabilities.