Vulnerability Details CVE-2019-5121
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter uuid in /objects/pluginSwitch.json.php
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.3%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 6.5
References
Products affected by CVE-2019-5121
-
cpe:2.3:a:youphptube:youphptube:7.6