Vulnerabilities (CVE)

Filtered by vendor Youphptube Subscribe
Filtered by product Youphptube Encoder
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-5127 1 Youphptube 1 Youphptube Encoder 2024-02-04 7.5 HIGH 9.8 CRITICAL
A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in /objects/getImage.php is vulnerable to a command injection attack.
CVE-2019-5128 1 Youphptube 1 Youphptube Encoder 2024-02-04 7.5 HIGH 9.8 CRITICAL
A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack.
CVE-2019-5129 1 Youphptube 1 Youphptube Encoder 2024-02-04 7.5 HIGH 9.8 CRITICAL
A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in /objects/getSpiritsFromVideo.php is vulnerable to a command injection attack.