Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WWBN — Vulnerabilities & Security Advisories 329

Browse all 329 CVE security advisories affecting WWBN. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WWBN operates as a provider of web-based business solutions, primarily focusing on content management and e-commerce platforms that enable organizations to manage digital assets and online transactions. Historically, its software has been susceptible to a wide array of critical vulnerabilities, including Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from insufficient input validation and outdated dependencies. These flaws have frequently allowed attackers to escalate privileges, execute arbitrary commands, or exfiltrate sensitive data. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) indicates persistent security challenges within the codebase, reflecting difficulties in maintaining rigorous patch management and secure coding practices over time. Consequently, organizations deploying WWBN solutions face significant risks if they do not implement robust network segmentation and timely updates to mitigate these known attack vectors.

Top products by WWBN: AVideo AVideo-Encoder
CVE ID Title CVSS Severity Published
CVE-2026-88876 AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD — AVideo CWE-200 7.5 High 2026-09-10
CVE-2026-88875 AVideo Incomplete API Sanitization Information Disclosure — AVideo CWE-359 4.3 Medium 2026-09-10
CVE-2026-88873 WWBN AVideo Cross-Site Request Forgery via logArchive.json.php — AVideo CWE-352 7.1 High 2026-09-10
CVE-2026-88874 AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass — AVideo CWE-200 7.5 High 2026-09-10
CVE-2026-88872 AVideo CustomizeUser setPassword.json.php CSRF — AVideo CWE-352 7.1 High 2026-09-10
CVE-2026-88871 WWBN AVideo CustomizeUser setSubscribers CSRF via GET — AVideo CWE-352 4.3 Medium 2026-09-10
CVE-2026-88870 WWBN AVideo LoginControl PGP Key CSRF via GET Request — AVideo CWE-352 7.1 High 2026-09-10
CVE-2026-88869 AVideo AD_Server Stored XSS via log.php label parameter — AVideo CWE-79 9.3 Critical 2026-09-10
CVE-2026-88868 AVideo LiveLinks Stored XSS via title and description fields — AVideo CWE-79 8.7 High 2026-09-10
CVE-2026-88867 WWBN AVideo Stored XSS via Category Name and Icon Class — AVideo CWE-79 8.7 High 2026-09-10
CVE-2026-88866 WWBN AVideo LoginControl Stored XSS via User-Agent Header — AVideo CWE-79 8.7 High 2026-09-10
CVE-2026-88865 AVideo Missing Authorization via getRestream.json.php — AVideo CWE-639 8.1 High 2026-09-10
CVE-2026-86728 AVideo through 29.0 Unauthenticated Disclosure via epg.json.php — AVideo CWE-306 7.5 High 2026-09-08
CVE-2026-86729 WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize — AVideo CWE-307 7.4 High 2026-09-08
CVE-2026-86727 AVideo through 29.0 Information Disclosure via stats.json.php — AVideo CWE-306 7.5 High 2026-09-08
CVE-2026-86725 AVideo SocialMediaPublisher Missing Authorization via add.json.php — AVideo CWE-639 7.1 High 2026-09-08
CVE-2026-86726 AVideo through 29.0 Information Disclosure via restreamsActive.json.php — AVideo CWE-522 6.5 Medium 2026-09-08
CVE-2026-86724 AVideo YPTWallet saveBalance.php Cross-Site Request Forgery — AVideo CWE-352 6.5 Medium 2026-09-08
CVE-2026-86723 AVideo LoginControl PGP Authentication Bypass via verifyChallenge — AVideo CWE-287 8.1 High 2026-09-08
CVE-2026-86721 AVideo through c3edcc274c Authorization Bypass via Session Cookie — AVideo CWE-287 7.5 High 2026-09-08
CVE-2026-86722 AVideo Authentication Bypass via SQL Cache Invalidation — AVideo CWE-287 8.1 High 2026-09-08
CVE-2026-86720 WWBN AVideo Missing Authorization via resendRestreamer.json.php — AVideo CWE-639 8.1 High 2026-09-08
CVE-2026-86718 WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php — AVideo CWE-352 7.1 High 2026-09-08
CVE-2026-86719 WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking — AVideo CWE-352 5.4 Medium 2026-09-08
CVE-2026-86190 WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter — AVideo CWE-200 9.1 Critical 2026-09-05
CVE-2026-86189 WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php — AVideo CWE-73 9.8 Critical 2026-09-05
CVE-2026-86188 AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting — AVideo CWE-79 7.2 High 2026-09-05
CVE-2026-86186 AVideo API Rate Limit Bypass via Bot User-Agent Header — AVideo CWE-307 6.5 Medium 2026-09-05
CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login — AVideo CWE-330 5.9 Medium 2026-09-05
CVE-2026-85577 AVideo userLogin.php Reflected XSS via error parameter — AVideo CWE-79 5.4 Medium 2026-09-04

This page lists every published CVE security advisory associated with WWBN. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.