Vulnerability index

Browse CVEs

23 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Youphptube MEDIUM 6.1
CVE-2021-47750

YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the redirectUri parameter i…

Fix: after 7.8
Fix from $1,600 2026-01-13
Youphptube MEDIUM 5.5
CVE-2021-47749

YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the '…

Fix: after 7.8
Fix from $1,600 2026-01-13
Youphptube HIGH 7.2
CVE-2021-25877

AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag…

Fix: after 10.0
Fix from $1,950 2021-11-01
Youphptube MEDIUM 6.1
CVE-2021-25875

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which…

Fix: after 10.0
Fix from $1,600 2021-11-01
Youphptube MEDIUM 6.1
CVE-2021-25876

AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to …

Fix: after 10.0
Fix from $1,600 2021-11-01
Youphptube MEDIUM 6.1
CVE-2021-25878

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a …

Fix: after 10.0
Fix from $1,600 2021-11-01
Youphptube HIGH 7.5
CVE-2021-25874

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauth…

Fix: after 10.0
Fix from $1,950 2021-11-01
Youphptube CRITICAL 9.8
CVE-2019-18662

An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat.json.php…

Fix: after 7.7
Fix from $2,300 2019-11-02
Youphptube CRITICAL 9.8
CVE-2019-5151

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can cause a SQL injection, possi…

No fix yet
Fix from $2,300 2019-10-31
Youphptube HIGH 8.1
CVE-2019-5150

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially crafted unauthenticated HTTP …

No fix yet
Fix from $1,950 2019-10-31
Youphptube CRITICAL 9.9
CVE-2019-5114

An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL inject…

No fix yet
Fix from $2,300 2019-10-25
Youphptube Encoder CRITICAL 9.8
CVE-2019-5127EPSS 45%

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthen…

No fix yet
Fix from $2,300 2019-10-25
Youphptube Encoder CRITICAL 9.8
CVE-2019-5128EPSS 30%

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthen…

No fix yet
Fix from $2,300 2019-10-25
Youphptube Encoder CRITICAL 9.8
CVE-2019-5129EPSS 39%

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthen…

No fix yet
Fix from $2,300 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5116

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause a SQL injecti…

No fix yet
Fix from $1,950 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5117

Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injecti…

No fix yet
Fix from $1,950 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5119

An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections…

Mitigation only
Fix from $1,950 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5120

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injection…

No fix yet
Fix from $1,950 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5121

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacke…

No fix yet
Fix from $1,950 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5122

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacke…

No fix yet
Fix from $1,950 2019-10-25
Youphptube HIGH 8.8
CVE-2019-5123

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSw…

No fix yet
Fix from $1,950 2019-10-25
Youphptube CRITICAL 9.8
CVE-2019-16124EPSS 28%

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, …

Fix: after 7.4
Fix from $2,300 2019-09-09
Youphptube MEDIUM 5.3
CVE-2019-14430

plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.

Fix: after 7.2
Fix from $1,600 2019-08-20