SQL Injection in Videosbroadcastyourself Videos Broadcast Yourself
CVE-2009-2924
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter to videoint.php, and possibly the (2) cat_id parameter to catvideo.php and (3) uid parameter to cviewchannels.php.
Vulnerability class: SQL Injection
EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.
Affected products
- Videosbroadcastyourself Videos_broadcast_yourself — versions 2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)