Unscored CVE-2019-16124 EUVD-2019-6963GHSA-h63m-qhvj-pcgq

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configurat…

Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.

References

https://zerodays.lol/
https://www.exploit-db.com/exploits/47326
https://github.com/YouPHPTube/YouPHPTube/commit/b32b410c9191c3c5db888514c29d7921f124d883