Skip to content
OpenAdvisories
High · 7.4 CVE-2019-5123 EUVD-2019-14728GHSA-8pj5-hw75-8rrf

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /object…

Published Oct 25, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSwitch.json.php.

Affected products

VendorProductAffectedFixed
— YouPHPTube YouPHPTube 6.2 ,YouPHPTube 7.6 ,YouPHPTube 7.7 commit 64d35de96e43c5e5b3d582162c12b86eec7e986b (Oct 1st 2019) —

References