Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4432. PoCs published by kaMtiEz.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in VideoCMS version 3.1 or lower. The PoC provides a crafted SQL query to extract user credentials and version information from the database.
Description
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action.
Exploits (1)
exploitdb
WORKING POC
by kaMtiEz · textwebappsphp
https://www.exploit-db.com/exploits/10586
This exploit demonstrates a SQL injection vulnerability in VideoCMS version 3.1 or lower. The PoC provides a crafted SQL query to extract user credentials and version information from the database.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
VideoCMS 3.1 or lower
No auth needed
Prerequisites:
Access to the vulnerable endpoint · Valid video ID parameter
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37889
Exploit x_refsource_misc
http://packetstormsecurity.org/0912-exploits/videocms-sql.txt
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/10586
Scores
EPSS
0.0099
EPSS Percentile
58.0%
Details
CWE
CWE-89
Status
published
Products (1)
codemight/videocms
3.1
Published
Dec 28, 2009
Tracked Since
Feb 18, 2026