YouPHPTube kayıtları
YouPHPTube üreticisine ait 23 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')13
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-862 Missing Authorization1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
23 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
53Planlayın | CVE-2019-5127Kavram kanıtı | A command injection have been found in YouPHPTube Encoder.youphptube · youphptube encoder · CWE-78 | Kritik9,8 | %45,325 Eki 2019 |
51Planlayın | CVE-2019-5129Kavram kanıtı | A command injection have been found in YouPHPTube Encoder.youphptube · youphptube encoder · CWE-78 | Kritik9,8 | %38,525 Eki 2019 |
48Planlayın | CVE-2019-5128Kavram kanıtı | A command injection have been found in YouPHPTube Encoder.youphptube · youphptube encoder · CWE-78 | Kritik9,8 | %30,125 Eki 2019 |
47Planlayın | CVE-2019-16124İstismar yok | In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuratiyouphptube · youphptube · CWE-862 | Kritik9,8 | %27,58 Eyl 2019 |
40Planlayın | CVE-2019-18662İstismar yok | An issue was discovered in YouPHPTube through 7.7.youphptube · youphptube · CWE-89 | Kritik9,8 | %2,32 Kas 2019 |
40Planlayın | CVE-2019-5151İstismar yok | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7.youphptube · youphptube · CWE-89 | Kritik9,8 | %2,231 Eki 2019 |
39İzleyin | CVE-2019-5114İstismar yok | An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Kritik9,9 | %1,325 Eki 2019 |
35İzleyin | CVE-2021-47749İstismar yok | YouPHPTube <= 7.8 - Directory Traversalyouphptube · youphptube · CWE-22 | Yüksek8,7 | %1,813 Oca 2026 |
35İzleyin | CVE-2019-5120İstismar yok | An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %1,025 Eki 2019 |
35İzleyin | CVE-2019-5121İstismar yok | SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %1,025 Eki 2019 |
35İzleyin | CVE-2019-5117İstismar yok | Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %1,025 Eki 2019 |
35İzleyin | CVE-2019-5116İstismar yok | An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %1,025 Eki 2019 |
35İzleyin | CVE-2019-5123İstismar yok | Specially crafted web requests can cause SQL injections in YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %1,025 Eki 2019 |
35İzleyin | CVE-2019-5119İstismar yok | An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %0,925 Eki 2019 |
35İzleyin | CVE-2019-5122İstismar yok | SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6.youphptube · youphptube · CWE-89 | Yüksek8,8 | %0,825 Eki 2019 |
32İzleyin | CVE-2019-5150İstismar yok | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7.youphptube · youphptube · CWE-89 | Yüksek8,1 | %1,531 Eki 2019 |
31İzleyin | CVE-2021-25874İstismar yok | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remoyouphptube · youphptube · CWE-89 | Yüksek7,5 | %1,71 Kas 2021 |
28İzleyin | CVE-2021-25877İstismar yok | AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write.youphptube · youphptube · CWE-94 | Yüksek7,2 | %1,51 Kas 2021 |
24İzleyin | CVE-2021-25875İstismar yok | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameyouphptube · youphptube · CWE-79 | Orta6,1 | %0,81 Kas 2021 |
24İzleyin | CVE-2021-25876İstismar yok | AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attyouphptube · youphptube · CWE-79 | Orta6,1 | %0,81 Kas 2021 |
24İzleyin | CVE-2021-25878İstismar yok | AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which youphptube · youphptube · CWE-79 | Orta6,1 | %0,81 Kas 2021 |
22İzleyin | CVE-2019-14430Kavram kanıtı | plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.youphptube · youphptube · CWE-89 | Orta5,3 | %2,920 Ağu 2019 |
20İzleyin | CVE-2021-47750İstismar yok | YouPHPTube <= 7.8 - Cross-Site Scriptingyouphptube · youphptube · CWE-79 | Orta5,1 | %0,313 Oca 2026 |
- CVE-2019-512753Planlayın
A command injection have been found in YouPHPTube Encoder.
KritikCVSS 9,8Kavram kanıtıEPSS %45youphptube · youphptube encoder25 Eki 2019
- CVE-2019-512951Planlayın
A command injection have been found in YouPHPTube Encoder.
KritikCVSS 9,8Kavram kanıtıEPSS %38youphptube · youphptube encoder25 Eki 2019
- CVE-2019-512848Planlayın
A command injection have been found in YouPHPTube Encoder.
KritikCVSS 9,8Kavram kanıtıEPSS %30youphptube · youphptube encoder25 Eki 2019
- CVE-2019-1612447Planlayın
In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configurati
KritikCVSS 9,8İstismar yokEPSS %27youphptube · youphptube8 Eyl 2019
- CVE-2019-1866240Planlayın
An issue was discovered in YouPHPTube through 7.7.
KritikCVSS 9,8İstismar yokEPSS %2youphptube · youphptube2 Kas 2019
- CVE-2019-515140Planlayın
An exploitable SQL injection vulnerability exist in YouPHPTube 7.7.
KritikCVSS 9,8İstismar yokEPSS %2youphptube · youphptube31 Eki 2019
- CVE-2019-511439İzleyin
An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6.
KritikCVSS 9,9İstismar yokEPSS %1youphptube · youphptube25 Eki 2019
- CVE-2021-4774935İzleyin
YouPHPTube <= 7.8 - Directory Traversal
YüksekCVSS 8,7İstismar yokEPSS %1youphptube · youphptube13 Oca 2026
- CVE-2019-512035İzleyin
An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %1youphptube · youphptube25 Eki 2019
- CVE-2019-512135İzleyin
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %1youphptube · youphptube25 Eki 2019
- CVE-2019-511735İzleyin
Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %1youphptube · youphptube25 Eki 2019
- CVE-2019-511635İzleyin
An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %1youphptube · youphptube25 Eki 2019
- CVE-2019-512335İzleyin
Specially crafted web requests can cause SQL injections in YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %1youphptube · youphptube25 Eki 2019
- CVE-2019-511935İzleyin
An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %0youphptube · youphptube25 Eki 2019
- CVE-2019-512235İzleyin
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6.
YüksekCVSS 8,8İstismar yokEPSS %0youphptube · youphptube25 Eki 2019
- CVE-2019-515032İzleyin
An exploitable SQL injection vulnerability exist in YouPHPTube 7.7.
YüksekCVSS 8,1İstismar yokEPSS %1youphptube · youphptube31 Eki 2019
- CVE-2021-2587431İzleyin
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remo
YüksekCVSS 7,5İstismar yokEPSS %1youphptube · youphptube1 Kas 2021
- CVE-2021-2587728İzleyin
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write.
YüksekCVSS 7,2İstismar yokEPSS %1youphptube · youphptube1 Kas 2021
- CVE-2021-2587524İzleyin
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parame
OrtaCVSS 6,1İstismar yokEPSS %0youphptube · youphptube1 Kas 2021
- CVE-2021-2587624İzleyin
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote att
OrtaCVSS 6,1İstismar yokEPSS %0youphptube · youphptube1 Kas 2021
- CVE-2021-2587824İzleyin
AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which
OrtaCVSS 6,1İstismar yokEPSS %0youphptube · youphptube1 Kas 2021
- CVE-2019-1443022İzleyin
plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.
OrtaCVSS 5,3Kavram kanıtıEPSS %2youphptube · youphptube20 Ağu 2019
- CVE-2021-4775020İzleyin
YouPHPTube <= 7.8 - Cross-Site Scripting
OrtaCVSS 5,1İstismar yokEPSS %0youphptube · youphptube13 Oca 2026