Description
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YouPHPTube | YouPHPTube | ≤ 7.8 | — |
References
- ExploitDB-51101 exploit
- Archived YouPHPTube Homepage product
- VulnCheck Advisory: YouPHPTube <= 7.8 - Directory Traversal third-party-advisory