high7.5Public exploit code
CVE-2009-4432
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video act…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VideoCMS 3.1 - SQL Injection2009-12-21 · webapps · php
Impact
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codemight | Videocms | Version 3.1 |