high8.8
CVE-2019-5121
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6.
Impact
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter uuid in /objects/pluginSwitch.json.php
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Youphptube | Youphptube | Version 7.6 |