CVE-2019-16124

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, a...

Original description

The description as published by the source.

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory zerodays.lol
patch github.com
report exploit-db.com