An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially crafted unauthenticated HTTP request can cause a SQL injection, possibly leading to denial of service, exfiltration of the database and local file inclusion, which could potentially further lead to code execution. An attacker can send an HTTP request to trigger this vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0940 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: talos
Published: 2019-10-31T19:32:12
Updated: 2022-04-19T17:34:55
Reserved: 2019-01-04T00:00:00
Link: CVE-2019-5150
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-10-31T20:15:11.380
Modified: 2022-06-27T17:20:17.893
Link: CVE-2019-5150
JSON object: View
Redhat Information
No data.
CWE