AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote malicious user to steal administrators' session cookies or perform actions as an administrator.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
youphptube youphptube |