Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exis

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
talos

Description

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in /objects/getImage.php is vulnerable to a command injection attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a YouPHPTube"

  • YouPHPTube Encoder 2.3affected

References