CVE-2021-47749 — YouPHPTube <= 7.8 - Directory Traversal
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET reque…
Published: 2026-01-13 · CVSS: 8.7 · CVSS 4.0
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7