CVE-2009-2924

Videosbroadcastyourself Videos Broadcast Yourself - SQL Injection

Title source: rule

Description

Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter to videoint.php, and possibly the (2) cat_id parameter to catvideo.php and (3) uid parameter to cviewchannels.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mr.SQL · textwebappsphp

https://www.exploit-db.com/exploits/9453

View Code ZIP pw:eip

References (1)

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/9453

Scores

EPSS 0.0023

EPSS Percentile 45.8%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

videosbroadcastyourself/videos_broadcast_yourself

Timeline

Published Aug 21, 2009

Tracked Since Feb 18, 2026