Skip to content
OpenAdvisories

Vendor

WWBN

350 known vulnerabilities.

Products

AVideo 340 AVideo-Encoder 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-29058 Public exploit Scanner template

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, d…

    WWBN AVideo-Encoder wwbn/avideo Packagist
  • Critical 9.8
    CVE-2026-28501 Public exploit

    WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

    WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQL Injection vulnerability exists in AVideo within the objects/videos.json.php and objects/video.php components. The application fails to properly sanitize the catName pa…

    WWBN AVideo wwbn/avideo Packagist