An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can cause a SQL injection, possibly leading to denial of service, exfiltration of the database and local file inclusion, which could potentially further lead to code execution. An attacker can send an HTTP request to trigger this vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0941 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: talos
Published: 2019-10-31T19:43:30
Updated: 2022-04-19T17:34:56
Reserved: 2019-01-04T00:00:00
Link: CVE-2019-5151
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-10-31T20:15:11.460
Modified: 2022-06-27T17:20:08.837
Link: CVE-2019-5151
JSON object: View
Redhat Information
No data.
CWE