CVE-2009-2151

AdaptWeb 0.9.2 - Path Traversal via Newlang Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2151. PoCs published by SirGod.

AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in AdaptWeb 0.9.2: a Local File Inclusion (LFI) via the 'newlang' parameter and an SQL Injection via the 'opcao' parameter. Both PoCs are functional and include specific payloads to exploit the vulnerabilities.

Description

Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the newlang parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by SirGod · textwebappsphp
https://www.exploit-db.com/exploits/8954

The exploit demonstrates two vulnerabilities in AdaptWeb 0.9.2: a Local File Inclusion (LFI) via the 'newlang' parameter and an SQL Injection via the 'opcao' parameter. Both PoCs are functional and include specific payloads to exploit the vulnerabilities.

Classification
Working Poc 90%
Attack Type
Sqli | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: AdaptWeb 0.9.2
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8954

Scores

EPSS 0.0271
EPSS Percentile 84.0%

Details

CWE
CWE-22
Status published
Products (1)
adaptweb/adaptweb 0.9.2
Published Jun 22, 2009
Tracked Since Feb 18, 2026