PT-2026-2358 · Unknown · Youphptube

Rafael Pedrero · Published 2026-01-13 · Updated 2026-01-15 · CVE-2021-47749

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions YouPHPTube versions prior to 7.9

Description The software contains a local file inclusion issue that allows unauthenticated attackers to access arbitrary files. This is possible by manipulating the lang parameter in GET requests. The path traversal flaw exists in the locale/function.php file, enabling attackers to include and view PHP files outside the intended directory using directory traversal sequences.

Recommendations Update to version 7.9 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-47749

Affected Products

Youphptube

References · 6

• 🔥 https://exploit-db.com/exploits/51101 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47749 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47749 · Vendor Advisory
• https://twitter.com/CVEnew/status/2011759644083921144 · Twitter Post
• https://web.archive.org/web/20170506141644/https://youphptube.com · Note
• https://vulncheck.com/advisories/youphptube-directory-traversal · Note