CVE-2019-5128
A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- January 04, 2019
- Published Date
- October 25, 2019
- Last Updated
- August 04, 2024
- Vendor
- YouPHPTube
- Product
- YouPHPTube
- Description
- A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack.
- Tags
- Score
- 91.67% (Percentile: 99.65%) as of 2025-05-25
- Exploited in the Wild
- Yes (2025-04-30 00:00:00 UTC) Source
php
nuclei_scanner
CVSS Scores
CVSS v3.0
10.0 - CRITICAL
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score
Exploit Status
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| The Shadowserver (via CIRCL) | 2025-04-27 00:00:00 UTC |
Scanner Integrations
| Scanner | URL | Date Detected |
|---|---|---|
| Nuclei | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5128.yaml | 2025-05-22 07:00:33 UTC |
Timeline
-
CVE ID Reserved
-
CVE Published to Public
-
Added to KEVIntel
-
Detected by Nuclei