Skip to content
OpenAdvisories

Product · WWBN

AVideo-Encoder

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-29058 Public exploit Scanner template

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, d…

    WWBN AVideo-Encoder wwbn/avideo Packagist