Vulnerabilities > Youphptube

DATE CVE VULNERABILITY TITLE RISK
2021-11-01 CVE-2021-25874 SQL Injection vulnerability in Youphptube
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes.
network
low complexity
youphptube CWE-89
5.0
2021-11-01 CVE-2021-25875 Cross-site Scripting vulnerability in Youphptube
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
network
youphptube CWE-79
4.3
2021-11-01 CVE-2021-25876 Cross-site Scripting vulnerability in Youphptube
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
network
youphptube CWE-79
4.3
2021-11-01 CVE-2021-25877 Incorrect Permission Assignment for Critical Resource vulnerability in Youphptube
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write.
network
low complexity
youphptube CWE-732
critical
9.0
2021-11-01 CVE-2021-25878 Cross-site Scripting vulnerability in Youphptube
AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
network
youphptube CWE-79
4.3
2019-11-02 CVE-2019-18662 SQL Injection vulnerability in Youphptube
An issue was discovered in YouPHPTube through 7.7.
network
low complexity
youphptube CWE-89
7.5
2019-10-31 CVE-2019-5151 SQL Injection vulnerability in Youphptube 7.7
An exploitable SQL injection vulnerability exist in YouPHPTube 7.7.
network
low complexity
youphptube CWE-89
7.5
2019-10-31 CVE-2019-5150 SQL Injection vulnerability in Youphptube 7.7
An exploitable SQL injection vulnerability exist in YouPHPTube 7.7.
network
youphptube CWE-89
6.8
2019-10-25 CVE-2019-5129 OS Command Injection vulnerability in Youphptube Encoder 2.3
A command injection have been found in YouPHPTube Encoder.
network
low complexity
youphptube CWE-78
7.5
2019-10-25 CVE-2019-5128 OS Command Injection vulnerability in Youphptube Encoder 2.3
A command injection have been found in YouPHPTube Encoder.
network
low complexity
youphptube CWE-78
7.5