Description
YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.
References
https://www.exploit-db.com/exploits/51101
ExploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/youphptube-directory-traversal
Third Party Advisory
https://www.exploit-db.com/exploits/51101
ExploitThird Party AdvisoryVDB Entry
CVSS impact metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.2 · Medium
Information
Source identifier
Vulnerability status
Analyzed
Published
2026-01-13T23:15:48.913Z
1 month agoLast modified
2026-01-22T20:22:09.120Z
4 weeks ago