Lucene search
China National Vulnerability DatabaseCNVD-2022-05523HistoryNov 04, 2021 - 12:00 a.m.
YouPHPTube catName parameter SQL injection vulnerability
2021-11-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.004 Low
EPSS
Percentile
72.0%
YouPHPTube is a PHP-based video website system. youPHPTube is vulnerable to SQL injection in version 10.0 and earlier, which stems from the lack of validation of external input SQL statements for the catName parameter. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| youphptube youphptube | le | 10.0 |
Related
prion
prion
Sql injection
2021-11-01 12:15:00
nvd
nvd
CVE-2021-25874
2021-11-01 12:15:07
cvelist
cvelist
CVE-2021-25874
2021-11-01 11:32:48
cve
cve
CVE-2021-25874
2021-11-01 12:15:07