Vulnerabilities > Youphptube
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-11-01 | CVE-2021-25874 | SQL Injection vulnerability in Youphptube AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes. | 7.5 |
| 2021-11-01 | CVE-2021-25875 | Cross-site Scripting vulnerability in Youphptube AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator. | 6.1 |
| 2021-11-01 | CVE-2021-25876 | Cross-site Scripting vulnerability in Youphptube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator. | 6.1 |
| 2021-11-01 | CVE-2021-25877 | Code Injection vulnerability in Youphptube AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. | 7.2 |
| 2021-11-01 | CVE-2021-25878 | Cross-site Scripting vulnerability in Youphptube AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator. | 6.1 |
| 2019-11-02 | CVE-2019-18662 | SQL Injection vulnerability in Youphptube An issue was discovered in YouPHPTube through 7.7. | 9.8 |
| 2019-10-31 | CVE-2019-5151 | SQL Injection vulnerability in Youphptube 7.7 An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. | 9.8 |
| 2019-10-31 | CVE-2019-5150 | SQL Injection vulnerability in Youphptube 7.7 An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. | 8.1 |
| 2019-10-25 | CVE-2019-5129 | OS Command Injection vulnerability in Youphptube Encoder 2.3 A command injection have been found in YouPHPTube Encoder. | 9.8 |
| 2019-10-25 | CVE-2019-5128 | OS Command Injection vulnerability in Youphptube Encoder 2.3 A command injection have been found in YouPHPTube Encoder. | 9.8 |