Rezultati pretraživanja za 'Proizvođač: youphptube'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-25878 | 4.3 | AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator. | 2026-07-09 01:16:48 | 2021-11-01 12:15:08 |
| CVE-2021-25877 | 9.0 | AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php. | 2026-07-09 01:16:47 | 2021-11-01 12:15:08 |
| CVE-2021-25876 | 4.3 | AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator. | 2026-07-09 01:16:47 | 2021-11-01 12:15:08 |
| CVE-2021-25875 | 4.3 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administr | 2026-07-09 01:16:47 | 2021-11-01 12:15:08 |
| CVE-2021-25874 | 5.0 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes. | 2026-07-09 01:16:47 | 2021-11-01 12:15:07 |
| CVE-2021-47749 | 5.5 | YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php | 2026-01-26 16:15:54 | 2026-01-13 23:15:48 |
| CVE-2021-47750 | 6.1 | YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the redirectUri parameter in the signup page. Attackers can craft special signup URLs with embedded script tags to execute arbit | 2026-01-22 20:27:30 | 2026-01-13 23:15:49 |
| CVE-2019-5114 | 9.3 | An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger | 2022-09-10 02:43:00 | 2019-10-25 18:15:00 |
| CVE-2019-5117 | 6.5 | Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger t | 2022-07-19 10:59:00 | 2019-10-25 18:15:00 |
| CVE-2019-5116 | 6.5 | An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause a SQL injection. An attacker can send a web request with parameters containing SQL injection attacks to trigger th | 2022-07-19 10:57:00 | 2019-10-25 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/3
Zapisa po stranici: