Security Videos Tube 2.0 SQL Injection / XSS / Shell Upload November 17, 2014 007admin Videos Tube version 2.0 suffers from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities.