CVE-2021-47750 | Medium | 6.1 | 2026-01-13 | YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the redirectUri parameter in the sign… |
CVE-2021-47749 | Medium | 5.5 | 2026-01-13 | YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' para… |
CVE-2021-25878 | Medium | 6.1 | 2021-11-01 | AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote att… |
CVE-2021-25877 | High | 7.2 | 2021-11-01 | AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code… |
CVE-2021-25876 | Medium | 6.1 | 2021-11-01 | AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal admi… |
CVE-2021-25875 | Medium | 6.1 | 2021-11-01 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a… |
CVE-2021-25874 | High | 7.5 | 2021-11-01 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated… |
CVE-2019-18662 | Critical | 9.8 | 2019-11-02 | An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat.json.php is not pr… |
CVE-2019-5151 | Critical | 10.0 | 2019-10-31 | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can cause a SQL injection, possibly leadin… |
CVE-2019-5150 | High | 8.9 | 2019-10-31 | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially crafted unauthenticated HTTP request ca… |
CVE-2019-5129 | Critical | 9.8 | 2019-10-25 | A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated co… |
CVE-2019-5128 | Critical | 9.8 | 2019-10-25 | A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated co… |
CVE-2019-5127 | Critical | 9.8 | 2019-10-25 | A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated co… |
CVE-2019-5123 | High | 8.8 | 2019-10-25 | Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSwitch.json… |
CVE-2019-5122 | High | 8.8 | 2019-10-25 | SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send… |
CVE-2019-5121 | High | 8.8 | 2019-10-25 | SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send… |
CVE-2019-5120 | High | 8.8 | 2019-10-25 | An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An atta… |
CVE-2019-5119 | High | 8.8 | 2019-10-25 | An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attac… |
CVE-2019-5117 | High | 8.8 | 2019-10-25 | Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An at… |
CVE-2019-5116 | High | 8.8 | 2019-10-25 | An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause a SQL injection. An att… |
CVE-2019-5114 | Critical | 9.9 | 2019-10-25 | An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An a… |
CVE-2019-16124 | Critical | 9.8 | 2019-09-09 | In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert… |
CVE-2019-14430 | Medium | 5.3 | 2019-08-20 | plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection. |