3 matches found
WWBN AVideo 操作系统命令注入漏洞
WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo versions prior to 12.4. An attacker can exploit the vulnerability to execute arbitrary code via the video link field to embed video link functionality...
9.8CVSS8.9AI score0.01315EPSS
SaveExploits1References3
CVE-2023-25313: Improper Neutralization of Special Elements used in an OS Command
OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature...
9.8CVSS6.5AI score0.01315EPSS
SaveExploits1References3
20