Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WWBN — Vulnerabilities & Security Advisories 329

Browse all 329 CVE security advisories affecting WWBN. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WWBN operates as a provider of web-based business solutions, primarily focusing on content management and e-commerce platforms that enable organizations to manage digital assets and online transactions. Historically, its software has been susceptible to a wide array of critical vulnerabilities, including Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from insufficient input validation and outdated dependencies. These flaws have frequently allowed attackers to escalate privileges, execute arbitrary commands, or exfiltrate sensitive data. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) indicates persistent security challenges within the codebase, reflecting difficulties in maintaining rigorous patch management and secure coding practices over time. Consequently, organizations deploying WWBN solutions face significant risks if they do not implement robust network segmentation and timely updates to mitigate these known attack vectors.

Top products by WWBN: AVideo AVideo-Encoder
CVE ID Title CVSS Severity Published
CVE-2026-85163 AVideo Server-Side Request Forgery via epg_link parameter — AVideo CWE-918 6.5 Medium 2026-09-03
CVE-2026-85164 WWBN AVideo Server-Side Request Forgery via set_api_userImages — AVideo CWE-918 7.1 High 2026-09-03
CVE-2026-85162 AVideo through c91b5975d CSRF via saveLive.php — AVideo CWE-352 6.5 Medium 2026-09-03
CVE-2026-85161 AVideo removePoster.php Cross-Site Request Forgery File Deletion — AVideo CWE-352 4.3 Medium 2026-09-03
CVE-2026-85160 AVideo through c91b5975d CSRF and Path Traversal via stopLive.php — AVideo CWE-73 8.1 High 2026-09-03
CVE-2026-85159 AVideo Reflected XSS via cancelUri in userLogin.php — AVideo CWE-79 5.4 Medium 2026-09-03
CVE-2026-85157 WWBN AVideo Broken Access Control via feed/index.php program_id — AVideo CWE-200 5.3 Medium 2026-09-03
CVE-2026-85158 AVideo Reflected XSS via videoEmbeded.php link parameter — AVideo CWE-79 5.4 Medium 2026-09-03
CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page — AVideo CWE-200 5.3 Medium 2026-09-03
CVE-2026-85155 WWBN AVideo SQL Injection via get.json.php APIName channels — AVideo CWE-89 7.5 High 2026-09-03
CVE-2026-85154 WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash — AVideo CWE-269 9.8 Critical 2026-09-03
CVE-2026-84483 WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php — AVideo CWE-321 5.3 Medium 2026-09-01
CVE-2026-84482 WWBN AVideo Cross-Site Request Forgery via get_domain() validation — AVideo CWE-346 8.8 High 2026-09-01
CVE-2026-84480 WWBN AVideo Password Recovery Token Expiration Bypass — AVideo CWE-613 9.8 Critical 2026-09-01
CVE-2026-84481 WWBN AVideo through 30.0 Information Disclosure via MobileManager — AVideo CWE-200 6.9 Medium 2026-09-01
CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header — AVideo CWE-290 9.1 Critical 2026-09-01
CVE-2026-84478 WWBN AVideo Unauthenticated Arbitrary Log File Deletion — AVideo CWE-73 7.3 High 2026-09-01
CVE-2026-84477 AVideo Stored XSS via Live Schedule Title Description — AVideo CWE-79 5.4 Medium 2026-09-01
CVE-2026-84476 WWBN AVideo Authentication Bypass via X-Real-IP Header — AVideo CWE-290 7.5 High 2026-09-01
CVE-2026-84208 AVideo User_Location Plugin Unauthenticated SQL Injection — AVideo CWE-89 7.5 High 2026-09-01
CVE-2026-84187 AVideo on_publish.php Missing Authentication Check via RTMP Callback — AVideo CWE-284 8.2 High 2026-09-01
CVE-2026-83595 AVideo Cross-Site Request Forgery via plugin/API/set.json.php — AVideo CWE-352 8.1 High 2026-09-01
CVE-2026-82648 WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address — AVideo CWE-20 7.1 High 2026-08-30
CVE-2026-82647 WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php — AVideo CWE-352 6.1 Medium 2026-08-30
CVE-2026-82646 WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php — AVideo CWE-79 6.1 Medium 2026-08-30
CVE-2026-82645 AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token — AVideo CWE-347 8.6 High 2026-08-30
CVE-2026-82643 WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.php — AVideo CWE-307 6.5 Medium 2026-08-30
CVE-2026-82644 WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent — AVideo CWE-307 7.5 High 2026-08-30
CVE-2026-81732 WWBN AVideo through 30.0 Information Disclosure via report4.json.php — AVideo CWE-200 6.9 Medium 2026-08-28
CVE-2026-81733 WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.php — AVideo CWE-352 5.1 Medium 2026-08-28

This page lists every published CVE security advisory associated with WWBN. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.