• info
• discussion
• exploit
• solution
• references

YouTube Blog Multiple Input Validation Vulnerabilities

YouTube Blog is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, a cross-site scripting issue, and a remote file-include issue.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, execute arbitrary code within the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database

YouTube Blog 0.1 is vulnerable; other versions may also be affected.