Created this YouTube video downloader, I used a script for some of it's parts. It was created with Php and Bootstrap and a little bit of CSS and JQuery.
download.php seems vulnerable to a local file inclusion attack because of non-proper validation of the $_GET["token"] user input.
(Only came across this, because it had a lot of likes on Twitter and didn't have time to test / reproduce)
download.php
seems vulnerable to a local file inclusion attack because of non-proper validation of the$_GET["token"]
user input. (Only came across this, because it had a lot of likes on Twitter and didn't have time to test / reproduce)