CNNVD-202601-1956 Information
Jan 13, 2026
cve
CNNVD ID
CNNVD-202601-1956
Related CVE
- CNNVD Published: 2026-01-13
Description (Chinese)
YouPHPTube是YouPHPTube开源的一套基于PHP的视频网站系统。 YouPHPTube 7.8及之前版本存在路径遍历漏洞，该漏洞源于对GET请求中lang参数的操作不当，可能导致本地文件包含。
Description (English)
YouPHPTube is an open-source, PHP-based video website system. YouPHPTube 7.8 and previous versions have a loophole in the path, which results from the inappropriate operation of the lang parameters in the GET request, which may lead to local documentation.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
YouPHPTube
Published
2026-01-13
Last Modified
2026-02-24
References
https://www.youphptube.com/ https://web.archive.org/web/20170506141644/ https://www.exploit-db.com/exploits/51101 https://www.vulncheck.com/advisories/youphptube-directory-traversal
Share on: