CVE-2019-18662

概要

参考情報

• packetstormsecurity.com/files/155564/YouPHPTube-7.7-SQL-Injection.html
• seclists.org/fulldisclosure/2019/Dec/9
• YouPHPTube/YouPHPTube · Patch

youphptube のその他の脆弱性

• CVE-2021-47750中 6.1YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the redirectUri pa…
• CVE-2021-47749中 5.5YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulat…
• CVE-2021-25878中 6.1AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which …
• CVE-2021-25877高 7.2AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem u…
• CVE-2021-25876中 6.1AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote att…