Skip to content
OpenAdvisories

Vendor

WWBN

350 known vulnerabilities.

Products

AVideo 340 AVideo-Encoder 10
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-29058 Public exploit Scanner template

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, d…

    WWBN AVideo-Encoder wwbn/avideo Packagist
  • Critical 9.8
    CVE-2026-28501 Public exploit

    WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

    WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQL Injection vulnerability exists in AVideo within the objects/videos.json.php and objects/video.php components. The application fails to properly sanitize the catName pa…

    WWBN AVideo wwbn/avideo Packagist
  • High 8.8
    CVE-2023-32073 Public exploit

    AVideo command injection vulnerability

    WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-…

    WWBN AVideo wwbn/avideo Packagist
  • High 8.8
    CVE-2023-30854 Public exploit

    WWBN AVideo vulnerable to OS Command Injection

    AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.

    WWBN AVideo wwbn/avideo Packagist