Approved changes feed: RSS · Atom

cpe:2.3:a:youphptube:youphptube:7.6:*:*:*:*:*:*:*

part: a version: 7.6 update: *

VendorYouphptube (bd91c685-707e-53ec-9c46-2d9b353618a6)
ProductYouphptube (98ad04cf-90b1-59b4-b7e9-bee59820af21)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wwbn/avideo purl2cpe 2026-06-01 10:16:46.247016

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5123 vulnerable 2026-06-08 05:13:57.726761 Details available
HIGH (7.4)
Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSwitch.json.php.
Published: 2019-10-25T17:22:19.000Z
Updated: 2024-08-04T19:47:55.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5122 vulnerable 2026-06-08 05:13:57.726455 Details available
HIGH (7.4)
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter name in /objects/pluginSwitch.json.php.
Published: 2019-10-25T17:22:09.000Z
Updated: 2024-08-04T19:47:56.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5121 vulnerable 2026-06-08 05:13:57.726058 Details available
HIGH (7.4)
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter uuid in /objects/pluginSwitch.json.php
Published: 2019-10-25T17:22:02.000Z
Updated: 2024-08-04T19:47:56.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5120 vulnerable 2026-06-08 05:13:57.725748 Details available
HIGH (7.4)
An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain configurations, access the underlying operating system.
Published: 2019-10-25T17:29:20.000Z
Updated: 2024-08-04T19:47:55.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5119 vulnerable 2026-06-08 05:13:57.725316 Details available
HIGH (7.4)
An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain configurations, access the underlying operating system.
Published: 2019-10-25T17:29:28.000Z
Updated: 2024-08-04T19:47:56.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5117 vulnerable 2026-06-08 05:13:57.724987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5116 vulnerable 2026-06-08 05:13:57.724650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5114 vulnerable 2026-06-08 05:13:57.724213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.