Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

AVideo — Vulnerabilities & Security Advisories 344

All 344 CVE vulnerabilities found in AVideo, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities associated with AVideo, a video management and streaming platform, categorized under weak encryption and access control weaknesses. It aggregates a comprehensive collection of disclosed security issues affecting this specific product, covering historical reports from early releases through the most recent updates identified in the database. By accessing this resource, users can effectively track vendor advisories to stay informed about the latest patches and mitigation strategies released by the developers. The content allows security professionals to understand the prevalence and impact of specific weakness classes within the AVideo ecosystem, facilitating better risk assessment and compliance management. Additionally, researchers and administrators can look up a product's vulnerability history to analyze patterns in defect introduction and resolution over time. This structured view supports informed decision-making regarding upgrade paths and configuration hardening without needing to scour multiple external sources. The data serves as a centralized reference point for identifying known risks, helping organizations prioritize remediation efforts based on severity and exploitability. Whether you are a system administrator ensuring server stability or a security analyst evaluating the supply chain risk, this aggregation provides the necessary context to maintain a secure deployment of AVideo. It bridges the gap between raw CVE data and actionable security intelligence, offering a clear overview of the product's security posture and evolution.

Vendor: WWBN

CVE ID Title CVSS Severity Published
CVE-2026-89240 WWBN AVideo Reflected XSS via confirmLivePassword.php CWE-79 6.1 Medium 2026-09-11
CVE-2026-89239 WWBN AVideo Reflected XSS via Referer Header Comment Breakout CWE-79 6.1 Medium 2026-09-11
CVE-2026-89148 AVideo Open Redirect via playlistSort.php Referer Header CWE-352 5.4 Medium 2026-09-11
CVE-2026-88876 AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD CWE-200 7.5 High 2026-09-10
CVE-2026-88875 AVideo Incomplete API Sanitization Information Disclosure CWE-359 4.3 Medium 2026-09-10
CVE-2026-88873 WWBN AVideo Cross-Site Request Forgery via logArchive.json.php CWE-352 7.1 High 2026-09-10
CVE-2026-88874 AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass CWE-200 7.5 High 2026-09-10
CVE-2026-88872 AVideo CustomizeUser setPassword.json.php CSRF CWE-352 7.1 High 2026-09-10
CVE-2026-88871 WWBN AVideo CustomizeUser setSubscribers CSRF via GET CWE-352 4.3 Medium 2026-09-10
CVE-2026-88870 WWBN AVideo LoginControl PGP Key CSRF via GET Request CWE-352 7.1 High 2026-09-10
CVE-2026-88869 AVideo AD_Server Stored XSS via log.php label parameter CWE-79 9.3 Critical 2026-09-10
CVE-2026-88868 AVideo LiveLinks Stored XSS via title and description fields CWE-79 8.7 High 2026-09-10
CVE-2026-88867 WWBN AVideo Stored XSS via Category Name and Icon Class CWE-79 8.7 High 2026-09-10
CVE-2026-88866 WWBN AVideo LoginControl Stored XSS via User-Agent Header CWE-79 8.7 High 2026-09-10
CVE-2026-88865 AVideo Missing Authorization via getRestream.json.php CWE-639 8.1 High 2026-09-10
CVE-2026-86728 AVideo through 29.0 Unauthenticated Disclosure via epg.json.php CWE-306 7.5 High 2026-09-08
CVE-2026-86729 WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize CWE-307 7.4 High 2026-09-08
CVE-2026-86727 AVideo through 29.0 Information Disclosure via stats.json.php CWE-306 7.5 High 2026-09-08
CVE-2026-86725 AVideo SocialMediaPublisher Missing Authorization via add.json.php CWE-639 7.1 High 2026-09-08
CVE-2026-86726 AVideo through 29.0 Information Disclosure via restreamsActive.json.php CWE-522 6.5 Medium 2026-09-08
CVE-2026-86724 AVideo YPTWallet saveBalance.php Cross-Site Request Forgery CWE-352 6.5 Medium 2026-09-08
CVE-2026-86723 AVideo LoginControl PGP Authentication Bypass via verifyChallenge CWE-287 8.1 High 2026-09-08
CVE-2026-86721 AVideo through c3edcc274c Authorization Bypass via Session Cookie CWE-287 7.5 High 2026-09-08
CVE-2026-86722 AVideo Authentication Bypass via SQL Cache Invalidation CWE-287 8.1 High 2026-09-08
CVE-2026-86720 WWBN AVideo Missing Authorization via resendRestreamer.json.php CWE-639 8.1 High 2026-09-08
CVE-2026-86718 WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php CWE-352 7.1 High 2026-09-08
CVE-2026-86719 WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking CWE-352 5.4 Medium 2026-09-08
CVE-2026-86189 WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php CWE-73 9.8 Critical 2026-09-05
CVE-2026-86190 WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter CWE-200 9.1 Critical 2026-09-05
CVE-2026-86188 AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting CWE-79 7.2 High 2026-09-05

All 344 known CVE vulnerabilities affecting AVideo with full Chinese analysis, references, and POCs where available.