Videos Tube Multiple Security Vulnerabilities
BID:71235
Info
Videos Tube Multiple Security Vulnerabilities
| Bugtraq ID: | 71235 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 17 2014 12:00AM |
| Updated: | Nov 17 2014 12:00AM |
| Credit: | KnocKout |
| Vulnerable: |
Videos Tube Project Videos Tube 2.0 |
| Not Vulnerable: | |
Discussion
Videos Tube Multiple Security Vulnerabilities
Videos Tube is prone to the following security vulnerabilities because it fails to sanitize user-supplied data:
1. A cross-site scripting vulnerability
2. An SQL-injection vulnerability
3. An arbitrary-file-upload vulnerability
Exploiting these issues could allow the attacker to execute arbitrary code, steal cookie-based authentication credentials, perform certain unauthorized actions and gain access to the affected application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Videos Tube version 2.0 is vulnerable; other versions may also be affected.
Videos Tube is prone to the following security vulnerabilities because it fails to sanitize user-supplied data:
1. A cross-site scripting vulnerability
2. An SQL-injection vulnerability
3. An arbitrary-file-upload vulnerability
Exploiting these issues could allow the attacker to execute arbitrary code, steal cookie-based authentication credentials, perform certain unauthorized actions and gain access to the affected application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Videos Tube version 2.0 is vulnerable; other versions may also be affected.