CVE-2026-33038

WWBN AVideo is an open source video platform. Versions 25.0 and below are vulnerable to unauthenticated application takeover through the install/checkConfiguration.php endpoint. install/checkConfiguration.php performs full application initialization: database setup, admin account creation, and...

YouPHPTube Remote Code Execution (CVE-2019-16124)

A remote code execution vulnerability exists in the checkConfiguration.php script of YouPHPTube. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...

PT-2019-14526 · Youphptube · Youphptube

Name of the Vulnerable Software and Affected Versions: YouPHPTube version 7.4 Description: The issue arises from the lack of access control in the file install/checkConfiguration.php, allowing anyone to edit the configuration file and potentially insert malicious PHP code. Recommendations: For...