CVE-2009-2152

AdaptWeb 0.9.2 - SQL Injection via CodigoDisciplina Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2152. PoCs published by SirGod.

AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in AdaptWeb 0.9.2: a Local File Inclusion (LFI) via the 'newlang' parameter and an SQL Injection via the 'opcao' parameter. Both PoCs are functional and include specific payloads to exploit the vulnerabilities.

Description

SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a TopicosCadastro1 action.

Exploits (1)

exploitdb WORKING POC VERIFIED
by SirGod · textwebappsphp
https://www.exploit-db.com/exploits/8954

The exploit demonstrates two vulnerabilities in AdaptWeb 0.9.2: a Local File Inclusion (LFI) via the 'newlang' parameter and an SQL Injection via the 'opcao' parameter. Both PoCs are functional and include specific payloads to exploit the vulnerabilities.

Classification
Working Poc 90%
Attack Type
Sqli | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: AdaptWeb 0.9.2
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8954

Scores

EPSS 0.0095
EPSS Percentile 56.5%

Details

CWE
CWE-89
Status published
Products (1)
isabela_gasparini/adaptweb 0.9.2
Published Jun 22, 2009
Tracked Since Feb 18, 2026