CVE-2019-5123

Name of the Vulnerable Software and Affected Versions YouPHPTube version 7.6

Description The issue allows specially crafted web requests to cause SQL injections. An attacker can exploit this by sending a web request with the dir parameter in the "/objects/pluginSwitch.json.php" endpoint.

Recommendations For YouPHPTube version 7.6, consider restricting access to the "/objects/pluginSwitch.json.php" endpoint until a patch is available. As a temporary workaround, avoid using the dir parameter in this endpoint to minimize the risk of exploitation.