CVE-2021-25877

Publication date

2021-11-01 11:33:18

Family

mitre

State

PUBLISHED

Description

AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.