CVE-2019-5123

HIGH Year: 2019
CVSS v3 Score
7.4
High
CVSS v2 Score
6.5
Medium
Weakness Type
CWE-89
View all →

Vulnerability Description

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSwitch.json.php.

Related Vulnerabilities

CVE-2016-9048

HIGH
CVSS:7.4(High)

Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request...

CWE-892016

CVE-2019-5109

HIGH
CVSS:7.4(High)

Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with param...

CWE-892019

CVE-2019-5110

HIGH
CVSS:7.4(High)

Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parame...

CWE-892019

CVE-2019-5111

HIGH
CVSS:7.4(High)

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filter_cat was confirmed to suffer from SQL injections and...

CWE-892019

CVE-2019-5112

HIGH
CVSS:7.4(High)

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filter_status was confirmed to suffer from SQL injections ...

CWE-892019

CVE-2019-5114

HIGH
CVSS:7.4(High)

An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with param...

CWE-892019