VULNERABILITY INTELLIGENCE
CVE-2021-25877
CVSS score7.2 HIGH
EPSS probability1.59%
CISA KEVNot currently listed
Published2021-11-01
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.
Weakness classification
- nvd@nist.gov: CWE-94
Primary references
- cve@mitre.org — Product
- cve@mitre.org — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory