CVE-2021-47749 HIGH

CVE-2021-47749: YouPHPTube <= 7.8 - Directory Traversal

Vendor Youphptube
Product YouPHPTube
Weakness CWE-22 · Path traversal
Published January 13, 2026
Last update May 14, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the intended directory by using directory traversal sequences.

Key dates

02Disclosure timeline

January 13, 2026 CVE published
May 14, 2026 Record updated