WWBN AVideo Remote Code Execution

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-31819 · ADVISORY
• WWBN/AVideo commit fcb1f79 · WEB
• chocapikk.com/posts/2024/cve-2024-31819 · WEB
• Chocapikk/CVE-2024-31819 · WEB
• WWBN/AVideo · PACKAGE
• chocapikk.com/posts/2024/cve-2024-31819 · Exploit
• github.com/WWBN · Product

wwbn/avideo의 다른 취약점

• CVE-2026-55173높음 8.1WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026…
• CVE-2026-33731보통 6.5WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.ph…
• CVE-2026-33692높음 7.5WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker …
• CVE-2026-49279높음 7.7WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML para…
• CVE-2026-33684보통 5.3WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameter…