CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16124

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-16124

Youphptube » Youphptube » Version: N/A

cpe:2.3:a:youphptube:youphptube:-
Youphptube » Youphptube » Version: 2.2

cpe:2.3:a:youphptube:youphptube:2.2
Youphptube » Youphptube » Version: 2.4

cpe:2.3:a:youphptube:youphptube:2.4
Youphptube » Youphptube » Version: 2.7

cpe:2.3:a:youphptube:youphptube:2.7
Youphptube » Youphptube » Version: 3.4

cpe:2.3:a:youphptube:youphptube:3.4
Youphptube » Youphptube » Version: 3.4.1

cpe:2.3:a:youphptube:youphptube:3.4.1
Youphptube » Youphptube » Version: 4.0

cpe:2.3:a:youphptube:youphptube:4.0
Youphptube » Youphptube » Version: 4.0.1

cpe:2.3:a:youphptube:youphptube:4.0.1
Youphptube » Youphptube » Version: 4.0.2

cpe:2.3:a:youphptube:youphptube:4.0.2
Youphptube » Youphptube » Version: 5.0

cpe:2.3:a:youphptube:youphptube:5.0
Youphptube » Youphptube » Version: 6.5

cpe:2.3:a:youphptube:youphptube:6.5
Youphptube » Youphptube » Version: 7.2

cpe:2.3:a:youphptube:youphptube:7.2
Youphptube » Youphptube » Version: 7.3

cpe:2.3:a:youphptube:youphptube:7.3
Youphptube » Youphptube » Version: 7.4

cpe:2.3:a:youphptube:youphptube:7.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16124

Products

Pricing

Contact Us