PT-2019-17496

Name of the Vulnerable Software and Affected Versions YouPHPTube Encoder version 2.3 Description A command injection issue has been discovered, which could allow an attacker to compromise the server. The issue is related to an unauthenticated command injection in the "base64Url" parameter of the...

CVE-2019-5129: Improper Neutralization of Special Elements used in an OS Command

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...