YouPHPTube commentAddNew.json.php file SQL injection vulnerability
YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in the 'commentsid' parameter of the commentAddNew.json.php file in YouPHPTube version 7.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. A...