high8.8
CVE-2019-5122
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6.
Impact
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter name in /objects/pluginSwitch.json.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Youphptube | Youphptube | Version 7.6 |