Youphptube
Approved changes feed: RSS · Atom
cpe:2.3:a:youphptube:youphptube:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Youphptube (bd91c685-707e-53ec-9c46-2d9b353618a6) |
|---|---|
| Product | Youphptube (98ad04cf-90b1-59b4-b7e9-bee59820af21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wwbn/avideo |
purl2cpe | 2026-06-01 10:16:46.246990 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47750 |
vulnerable | 2026-06-08 05:38:07.567975 |
YouPHPTube <= 7.8 - Cross-Site Scripting
MEDIUM (6.1)
YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the redirectUri parameter in the signup page. Attackers can craft special signup URLs with embedded script tags to execute arbitrary JavaScript in victims' browsers when they access the signup page.
Published: 2026-01-13T22:56:03.555Z
Updated: 2026-05-24T01:37:01.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47749 |
vulnerable | 2026-06-08 05:38:07.567471 |
YouPHPTube <= 7.8 - Directory Traversal
MEDIUM (5.5)
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.
Published: 2026-01-13T22:51:38.231Z
Updated: 2026-05-14T02:06:52.787Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25878 |
vulnerable | 2026-06-08 05:30:41.669637 |
Details available
AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
Published: 2021-11-01T11:33:25.000Z
Updated: 2026-07-09T00:12:38.009Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25877 |
vulnerable | 2026-06-08 05:30:41.669124 |
Details available
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.
Published: 2021-11-01T11:33:18.000Z
Updated: 2026-07-09T00:12:36.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25876 |
vulnerable | 2026-06-08 05:30:41.668701 |
Details available
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
Published: 2021-11-01T11:33:10.000Z
Updated: 2026-07-09T00:12:35.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25875 |
vulnerable | 2026-06-08 05:30:41.668270 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25874 |
vulnerable | 2026-06-08 05:30:41.667726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18662 |
vulnerable | 2026-06-08 05:13:12.054299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16124 |
vulnerable | 2026-06-08 05:13:07.759419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14430 |
vulnerable | 2026-06-08 05:12:54.835204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.