CVE-2019-16124

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.
Source: NIST
CVE-2019-16124

Leave a Reply

Your email address will not be published. Required fields are marked *