Skip to content
OpenAdvisories

Vendor

WWBN

350 known vulnerabilities.

Products

AVideo 340 AVideo-Encoder 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-32073 Public exploit

    AVideo command injection vulnerability

    WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-…

    WWBN AVideo wwbn/avideo Packagist
  • High 8.8
    CVE-2023-30854 Public exploit

    WWBN AVideo vulnerable to OS Command Injection

    AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.

    WWBN AVideo wwbn/avideo Packagist