CVE-2021-26786

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php...

CVE-2021-26786

The CVE-2021-26786 entry relates to PlayTube (customercentric-selling-poland), a PHP-based video platform. Affected component: config.php handling of purchase code. Root cause: a code injection/remote code execution path allows an authenticated attacker to execute arbitrary code via the purchase ...