← CVE Intelligence

CVE-2019-5122

n/a / YouPHPTube PUBLISHED

Description (CNA)

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter name in /objects/pluginSwitch.json.php.

Affected (CNA)

Vendor / productVersions
n/a / YouPHPTubeaffected YouPHPTube 6.2 , YouPHPTube 7.6 ,YouPHPTube 7.7 commit 64d35de96e43c5e5b3d582162c12b86eec7e986b (Oct 1st 2019)

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.