high8.8
CVE-2019-5123
Specially crafted web requests can cause SQL injections in YouPHPTube 7.6.
Impact
Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSwitch.json.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Youphptube | Youphptube | Version 7.6 |