{"cvss":10.0,"datePublished":"2023-11-14T00:00:00Z","dateUpdated":"2023-11-14T00:00:00Z","description":"A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in /objects/getSpiritsFromVideo.php is vulnerable to a command injection attack.","dueDate":"","id":"CVE-2019-5129","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"youphptube_encoder","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"youphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command","vendor":"youphptube"}