CVE Catalog
CVE-2017-17891
HighSummary
Readymade Video Sharing Script has a CSRF vulnerability in user-profile-edit.php.
Risk Assessment
An attacker could exploit this vulnerability to make unauthorized changes to user profiles, potentially leading to data loss or privacy breaches.
Recommendation
It is recommended to implement CSRF tokens in forms and update the script to the latest version to minimize risk.
Other vulnerabilities in Readymade Video Sharing Script
See all- CVE-2017-17892Critical
Readymade Video Sharing Script is vulnerable to SQL Injection via the chnlid parameter in viewsubs.php or the search parameter in search_video.php.
- CVE-2017-17627Critical
Readymade Video Sharing Script version 3.2 has an SQL Injection vulnerability via the report_videos array parameter in single-video-detail.php.
Original NVD description (English source)
Readymade Video Sharing Script has CSRF via user-profile-edit.php.