CVE-2009-4432

SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action...

CVE-2009-4432

CVE-2009-4432 : This entry concerns CodeMight VideoCMS 3.1, where a flaw in index.php allows remote SQL injection via the v parameter in a video action. The underlying issue is improper sanitization/validation of user-supplied input, enabling attackers to inject arbitrary SQL commands through thi...