CVE-2019-16124
In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, a...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.
参照URL
- advisory zerodays.lol
- patch github.com
- report exploit-db.com