CVE-2019-5127

🗓️ 25 Oct 2019 17:12:28Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 184 Views🌐 WEB

Command injection in YouPHPTube Encoder, version 2.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-5127	29 Jan 202409:41	–	circl
Check Point Advisories	YouPHPTube Encoder Command Injection (CVE-2019-5127; CVE-2019-5128; CVE-2019-5129)	25 Feb 202000:00	–	checkpoint_advisories
Cvelist	CVE-2019-5127	25 Oct 201917:12	–	cvelist
Nuclei	YouPHPTube Encoder 2.3 - Remote Command Injection	3 Jun 202606:04	–	nuclei
NVD	CVE-2019-5127	25 Oct 201918:15	–	nvd
Prion	Command injection	25 Oct 201918:15	–	prion
RedhatCVE	CVE-2019-5127	5 Feb 202517:57	–	redhatcve
Talos	YouPHPTube Encoder base64Url multiple command injections	17 Oct 201900:00	–	talos
Talos Blog	Vulnerability Spotlight: Multiple vulnerabilities in YouPHPTube	30 Oct 201906:27	–	talosblog
VulnCheck KEV	VulnCheck KEV: CVE-2019-5127	13 Nov 202300:00	–	vulncheck_kev

NVD

Node

youphptube youphptube_encoderMatch2.3

[
  {
    "product": "YouPHPTube\"",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "YouPHPTube Encoder 2.3"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2019-0917

Parameter	Position	Path	Description	CWE
base64Url	query param	/objects/getImage.php	Command injection vulnerability in YouPHPTube Encoder specifically in the base64Url parameter of /objects/getImage.php.	CWE-78

21 Nov 2024 04:44Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

CVSS 310

EPSS0.93982