CVE-2019-5122

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p56

Published

Oct 25, 2019 (Oct 25, 2019)

Modified

Jun 17, 2026

Description

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter name in /objects/pluginSwitch.json.php.

Vendors: youphptube
Products: youphptube
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.