Описание
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.
Ссылки
- Not Applicable
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 7.8 (включая)
cpe:2.3:a:youphptube:youphptube:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00175
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 6.2
github
25 дней назад
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.
EPSS
Процентиль: 39%
0.00175
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-22