CVE-2019-5119
Last modified
CVE-2019-5119 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. EPSS estimates a 0.97% chance of exploitation in the next 30 days.
Description
An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain configurations, access the underlying operating system.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Youphptube | Youphptube | 7.6 |
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0909Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0909Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-5119?
How severe is CVE-2019-5119?
How do I fix CVE-2019-5119?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-5110Exploitable SQL injection vulnerabilities exist in the authe…8.8
- CVE-2019-5111Exploitable SQL injection vulnerability exists in the authen…8.8
- CVE-2019-5112Exploitable SQL injection vulnerability exists in the authen…8.8
- CVE-2019-5114An exploitable SQL injection vulnerability exists in the aut…9.9
- CVE-2019-5116An exploitable SQL injection vulnerability exists in the aut…8.8
- CVE-2019-5117Exploitable SQL injection vulnerabilities exists in the auth…8.8
- CVE-2019-5120An exploitable SQL injection vulnerability exists in the aut…8.8
- CVE-2019-5121SQL injection vulnerabilities exists in the authenticated pa…8.8
- CVE-2019-5122SQL injection vulnerabilities exists in the authenticated pa…8.8
- CVE-2019-5123Specially crafted web requests can cause SQL injections in Y…8.8
- CVE-2019-5124An exploitable out-of-bounds read vulnerability exists in AM…8.6
- CVE-2019-5125An exploitable heap overflow vulnerability exists in the JPE…7.8
Are you affected by CVE-2019-5119?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST