Advisories · Technology
WWBN AVideo.
Every CVE that names WWBN AVideo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WWBN AVideo Reflected XSS via Referer Header Comment Breakout
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
AVideo Open Redirect via playlistSort.php Referer Header
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD
- WWBN AVideo
- Information disclosure
- CVSS 5.3 Medium
AVideo Incomplete API Sanitization Information Disclosure
- WWBN AVideo
- Information disclosure
- CVSS 8.7 High
AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass
- WWBN AVideo
- Information disclosure
- CVSS 7.1 High
WWBN AVideo Cross-Site Request Forgery via logArchive.json.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
AVideo CustomizeUser setPassword.json.php CSRF
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
WWBN AVideo CustomizeUser setSubscribers CSRF via GET
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
WWBN AVideo LoginControl PGP Key CSRF via GET Request
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
AVideo AD_Server Stored XSS via log.php label parameter
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
AVideo LiveLinks Stored XSS via title and description fields
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo Stored XSS via Category Name and Icon Class
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo LoginControl Stored XSS via User-Agent Header
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 8.6 High
AVideo Missing Authorization via getRestream.json.php
- WWBN AVideo
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
- WWBN AVideo
- Authentication bypass
- CVSS 8.7 High
AVideo through 29.0 Unauthenticated Disclosure via epg.json.php
- WWBN AVideo
- Authentication bypass
- CVSS 8.7 High
AVideo through 29.0 Information Disclosure via stats.json.php
- WWBN AVideo
- Authentication bypass
- CVSS 7.1 High
AVideo through 29.0 Information Disclosure via restreamsActive.json.php
- WWBN AVideo
- Hard-coded credentials
- CVSS 7.1 High
AVideo SocialMediaPublisher Missing Authorization via add.json.php
- WWBN AVideo
- Broken access control
- CVSS 7.1 High
AVideo YPTWallet saveBalance.php Cross-Site Request Forgery
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 8.6 High
AVideo LoginControl PGP Authentication Bypass via verifyChallenge
- WWBN AVideo
- Authentication bypass
- CVSS 8.6 High
AVideo Authentication Bypass via SQL Cache Invalidation
- WWBN AVideo
- Authentication bypass
- CVSS 8.7 High
AVideo through c3edcc274c Authorization Bypass via Session Cookie
- WWBN AVideo
- Authentication bypass
- CVSS 8.6 High
WWBN AVideo Missing Authorization via resendRestreamer.json.php
- WWBN AVideo
- Broken access control
- CVSS 5.3 Medium
WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter
- WWBN AVideo
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
- WWBN AVideo
- Path traversal
- CVSS 6.9 Medium
AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 7.4 High
WWBN AVideo Weak PRNG Password Generation via External Login
- WWBN AVideo
- Weak cryptography or TLS
- CVSS 6.3 Medium
AVideo API Rate Limit Bypass via Bot User-Agent Header
- WWBN AVideo
- Authentication bypass
- CVSS 5.3 Medium
AVideo userLogin.php Reflected XSS via error parameter
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 7.1 High
WWBN AVideo Server-Side Request Forgery via set_api_userImages
- WWBN AVideo
- Server-side request forgery (SSRF)
- CVSS 7.1 High
AVideo Server-Side Request Forgery via epg_link parameter
- WWBN AVideo
- Server-side request forgery (SSRF)
- CVSS 7.1 High
AVideo through c91b5975d CSRF via saveLive.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
AVideo removePoster.php Cross-Site Request Forgery File Deletion
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 7.2 High
AVideo through c91b5975d CSRF and Path Traversal via stopLive.php
- WWBN AVideo
- Path traversal
- CVSS 5.3 Medium
AVideo Reflected XSS via cancelUri in userLogin.php
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
AVideo Reflected XSS via videoEmbeded.php link parameter
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
WWBN AVideo Broken Access Control via feed/index.php program_id
- WWBN AVideo
- Information disclosure
- CVSS 6.9 Medium
WWBN AVideo Broken Access Control via Channel Page
- WWBN AVideo
- Information disclosure
- CVSS 8.7 High
WWBN AVideo SQL Injection via get.json.php APIName channels
- WWBN AVideo
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
- WWBN AVideo
- Privilege escalation
- CVSS 6.9 Medium
WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php
- WWBN AVideo
- Hard-coded credentials
- CVSS 8.7 High
WWBN AVideo Cross-Site Request Forgery via get_domain() validation
- WWBN AVideo
- CWE-346
- CVSS 6.9 Medium
WWBN AVideo through 30.0 Information Disclosure via MobileManager
- WWBN AVideo
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo Password Recovery Token Expiration Bypass
- WWBN AVideo
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
WWBN AVideo Authentication Bypass via User-Agent Header
- WWBN AVideo
- Authentication bypass
- CVSS 6.9 Medium
WWBN AVideo Unauthenticated Arbitrary Log File Deletion
- WWBN AVideo
- Path traversal
- CVSS 5.1 Medium
AVideo Stored XSS via Live Schedule Title Description
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 8.7 High
WWBN AVideo Authentication Bypass via X-Real-IP Header
- WWBN AVideo
- Authentication bypass
- CVSS 8.7 High
AVideo User_Location Plugin Unauthenticated SQL Injection
- WWBN AVideo
- SQL injection
- CVSS 8.8 High
AVideo on_publish.php Missing Authentication Check via RTMP Callback
- WWBN AVideo
- Broken access control
- CVSS 7.2 High
AVideo Cross-Site Request Forgery via plugin/API/set.json.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address
- WWBN AVideo
- CWE-20
- CVSS 5.3 Medium
WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php
- WWBN AVideo
- Cross-site scripting (XSS)
- CVSS 9.2 CriticalCritical · CVSS 9+
AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token
- WWBN AVideo
- Weak cryptography or TLS
- CVSS 8.7 High
WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent
- WWBN AVideo
- Authentication bypass
- CVSS 6.9 Medium
WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.php
- WWBN AVideo
- Authentication bypass