Vulnerability Details CVE-2021-25877
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.1%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 9.0
Products affected by CVE-2021-25877
-
cpe:2.3:a:youphptube:youphptube:-
-
cpe:2.3:a:youphptube:youphptube:10.0
-
cpe:2.3:a:youphptube:youphptube:2.2
-
cpe:2.3:a:youphptube:youphptube:2.4
-
cpe:2.3:a:youphptube:youphptube:2.7
-
cpe:2.3:a:youphptube:youphptube:3.4
-
cpe:2.3:a:youphptube:youphptube:3.4.1
-
cpe:2.3:a:youphptube:youphptube:4.0
-
cpe:2.3:a:youphptube:youphptube:4.0.1
-
cpe:2.3:a:youphptube:youphptube:4.0.2
-
cpe:2.3:a:youphptube:youphptube:5.0
-
cpe:2.3:a:youphptube:youphptube:6.5
-
cpe:2.3:a:youphptube:youphptube:7.2
-
cpe:2.3:a:youphptube:youphptube:7.3
-
cpe:2.3:a:youphptube:youphptube:7.4
-
cpe:2.3:a:youphptube:youphptube:7.6
-
cpe:2.3:a:youphptube:youphptube:7.7