Risk | High |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2019-16124 |
CWE-ID | CWE-269 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #1 is available. |
Vulnerable software Subscribe |
YouPHPTube Client/Desktop applications / Multimedia software |
Vendor | YouPHPTube |
Security Bulletin
This security bulletin contains one high risk vulnerability.
EUVDB-ID: #VU22469
Risk: High
CVSSv3.1: 8.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2019-16124
CWE-ID:
CWE-269 - Improper Privilege Management
Exploit availability: No
DescriptionInstall update from vendor's website.
Vulnerable software versionsYouPHPTube: 2.2 - 7.4
External linkshttp://github.com/YouPHPTube/YouPHPTube/commit/b32b410c9191c3c5db888514c29d7921f124d883
http://www.exploit-db.com/exploits/47326
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.