Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WWBN — Vulnerabilities & Security Advisories 326

Browse all 326 CVE security advisories affecting WWBN. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WWBN operates as a provider of web-based business solutions, primarily focusing on content management and e-commerce platforms that enable organizations to manage digital assets and online transactions. Historically, its software has been susceptible to a wide array of critical vulnerabilities, including Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from insufficient input validation and outdated dependencies. These flaws have frequently allowed attackers to escalate privileges, execute arbitrary commands, or exfiltrate sensitive data. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) indicates persistent security challenges within the codebase, reflecting difficulties in maintaining rigorous patch management and secure coding practices over time. Consequently, organizations deploying WWBN solutions face significant risks if they do not implement robust network segmentation and timely updates to mitigate these known attack vectors.

Top products by WWBN: AVideo AVideo-Encoder
CVE ID Title CVSS Severity Published
CVE-2026-105086 WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title — AVideo CWE-79 8.7 High 2026-10-04
CVE-2026-105089 WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates — AVideo CWE-79 8.7 High 2026-10-04
CVE-2026-100630 AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field — AVideo CWE-79 5.4 Medium 2026-09-26
CVE-2026-92915 WWBN AVideo userVerifyEmail.php Unauthenticated Access Control — AVideo CWE-770 7.3 High 2026-09-17
CVE-2026-92914 AVideo LoginControl PGP Second Factor Authentication Bypass — AVideo CWE-287 8.1 High 2026-09-17
CVE-2026-92913 AVideo Weak PRNG Activation Code Authentication Bypass — AVideo CWE-330 7.4 High 2026-09-17
CVE-2026-92912 AVideo Cryptographically Weak PRNG via uniqid Stream Key — AVideo CWE-330 6.5 Medium 2026-09-17
CVE-2026-92586 AVideo through 29.0 Missing Authorization via comment API endpoint — AVideo CWE-862 4.3 Medium 2026-09-16
CVE-2026-92585 AVideo through 29.0 Missing Authorization Check via API Like Endpoint — AVideo CWE-862 4.3 Medium 2026-09-16
CVE-2026-92584 AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header — AVideo CWE-79 6.1 Medium 2026-09-16
CVE-2026-92583 AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment — AVideo CWE-307 6.5 Medium 2026-09-16
CVE-2026-92582 AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass — AVideo CWE-352 7.1 High 2026-09-16
CVE-2026-92580 AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF — AVideo CWE-78 8.8 High 2026-09-16
CVE-2026-92581 AVideo through 29.0 Like Counter Desynchronization via Array Parameter — AVideo CWE-20 4.3 Medium 2026-09-16
CVE-2026-92579 AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision — AVideo CWE-289 5.4 Medium 2026-09-16
CVE-2026-92578 WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash — AVideo CWE-287 8.1 High 2026-09-16
CVE-2026-92577 AVideo through 29.0 API get_api_video Broken Access Control via clean_title — AVideo CWE-639 7.5 High 2026-09-16
CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header — AVideo CWE-918 5.8 Medium 2026-09-15
CVE-2026-91967 AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL — AVideo CWE-918 5.0 Medium 2026-09-15
CVE-2026-91965 WWBN AVideo through 29.0 Broken Access Control via Live Endpoints — AVideo CWE-200 7.5 High 2026-09-15
CVE-2026-90552 WWBN AVideo Missing Authorization via Playlists_schedules list.json.php — AVideo CWE-639 4.3 Medium 2026-09-12
CVE-2026-90550 WWBN AVideo Missing Authorization via mediaSession.json.php — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-90551 WWBN AVideo Missing Authorization via video_from_program API — AVideo CWE-862 5.3 Medium 2026-09-12
CVE-2026-90549 WWBN AVideo Missing Authorization via videosAndroid.json.php Endpoint — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-90548 WWBN AVideo Missing Authorization in ImageGallery list.json.php — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-90547 WWBN AVideo Missing Authorization via getBookmarks.json.php — AVideo CWE-862 5.3 Medium 2026-09-12
CVE-2026-90546 WWBN AVideo Missing Authorization via like.json.php — AVideo CWE-862 4.3 Medium 2026-09-12
CVE-2026-90545 WWBN AVideo Missing Authorization via commentAddNew.json.php — AVideo CWE-862 4.3 Medium 2026-09-12
CVE-2026-90543 WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php — AVideo CWE-306 5.3 Medium 2026-09-12
CVE-2026-90544 WWBN AVideo Missing Authorization via videoAddViewCount.json.php — AVideo CWE-862 4.3 Medium 2026-09-12

This page lists every published CVE security advisory associated with WWBN. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.