YouPHPTube Remote Code Execution (CVE-2019-16124)

A remote code execution vulnerability exists in the checkConfiguration.php script of YouPHPTube. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...

CVE-2019-16124

CVE-2019-16124 affects YouPHPTube 7.4, where install/checkConfiguration.php lacks access control, allowing unauthorized edits to the configuration and potential insertion of malicious PHP code. This is the root cause described across multiple sources, with CVSSv3.1 and CVSSv2 metrics indicating c...