CVE-2019-16124: Youphptube

Critical severity, CVSS 9.8. EPSS: 27.6% chance of exploitation in the next 30 days.

In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.

Affected products

• Youphptube Youphptube: up to and including 7.4

Published 2019-09-09. Last modified 2026-06-17.