YouPHPTube LiveChat Plugin SQL Injection Vulnerability

YouPHPTube is an open source YouTube clone script. A SQL injection vulnerability exists in the LiveChat plugin in YouPHPTube 7.7 and earlier versions. The vulnerability stems from a failure to properly validate user input passed via the livestreamcode POST parameter to...

PT-2019-15563

Name of the Vulnerable Software and Affected Versions YouPHPTube versions through 7.7 Description An issue was discovered where user input passed through the live stream code parameter to the "/plugin/LiveChat/getChat.json.php" endpoint is not properly sanitized. This can be exploited by maliciou...