CVE-2019-5120

CVE-2019-5120 is an authenticated SQL injection vulnerability affecting YouPHPTube version 7.6. An attacker can craft malicious web requests to exploit this flaw, potentially leading to the exfiltration of database contents, user credentials, and in some configurations, access to the underlying operating system. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, requiring only authenticated access. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.