Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WwbnAvideo

21 matches found

CVE
CVE•added 2022/08/22 7:15 p.m.•77 views

CVE-2022-26842

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP req...

9.6CVSS8.6AI score0.06198EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•73 views

CVE-2022-32770

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6.1AI score0.15186EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•72 views

CVE-2022-32772

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6.1AI score0.08256EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•71 views

CVE-2022-30534

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS8.9AI score0.13035EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•63 views

CVE-2022-32771

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6AI score0.10581EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•60 views

CVE-2022-28712

A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

9CVSS8.5AI score0.0371EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•59 views

CVE-2022-32572

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS8.9AI score0.23472EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•58 views

CVE-2022-30547

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS9.6AI score0.33688EPSS
CVE
CVE•added 2024/04/10 8:15 p.m.•54 views

CVE-2024-31819

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.

9.8CVSS7.7AI score0.86009EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•52 views

CVE-2022-30690

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this v...

9.6CVSS6.2AI score0.15138EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•43 views

CVE-2023-49599

An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead to privilege escalation. An attacker can gather system information via HTTP requests and brute force the salt offline, ...

9.8CVSS9.3AI score0.0029EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•40 views

CVE-2023-48728

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulner...

9.6CVSS6.2AI score0.18417EPSS
CVE
CVE•added 2023/04/25 4:15 p.m.•37 views

CVE-2023-25313

OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature.

9.8CVSS9.6AI score0.01372EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•37 views

CVE-2023-47862

A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send a series of HTTP requests to trigger this vulnerability.

9.8CVSS9.3AI score0.00881EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•25 views

CVE-2023-47861

A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerabi...

9CVSS5.6AI score0.00344EPSS
CVE
CVE•added 2025/07/24 4:15 p.m.•11 views

CVE-2025-36548

A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigg...

9.6CVSS6.1AI score0.00144EPSS
CVE
CVE•added 2025/07/24 4:15 p.m.•9 views

CVE-2025-48732

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can request a .phar file to trigger this vulnerability.

9.8CVSS7.2AI score0.01404EPSS
CVE
CVE•added 2025/07/24 4:15 p.m.•8 views

CVE-2025-41420

A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnera...

9.6CVSS6.1AI score0.00144EPSS
CVE
CVE•added 2025/07/24 4:15 p.m.•8 views

CVE-2025-50128

A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this v...

9.6CVSS6.1AI score0.00115EPSS
CVE
CVE•added 2025/07/24 4:15 p.m.•6 views

CVE-2025-46410

A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to tr...

9.6CVSS6.1AI score0.00115EPSS
CVE
CVE•added 2025/07/24 4:15 p.m.•6 views

CVE-2025-53084

A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerabili...

9CVSS6.1AI score0.00096EPSS