high7.5Public exploit code
CVE-2009-2924
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Videos Broadcast Yourself 2 - 'UploadID' SQL Injection2009-08-18 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter to videoint.php, and possibly the (2) cat_id parameter to catvideo.php and (3) uid parameter to cviewchannels.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Videosbroadcastyourself | Videos Broadcast Yourself | Version 2 |