CVE-2019-5122CWE-89

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6

High · published October 25, 2019

CVSS v3.0
7.4
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter name in /objects/pluginSwitch.json.php.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2019-10-25T17:22Z
EPSS history
Timeline
  • 25 OCT 17:22Z
    SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6
    cvelistv5