Approved changes feed: RSS · Atom

cpe:2.3:a:wwbn:avideo:11.6:*:*:*:*:*:*:*

part: a version: 11.6 update: *

VendorWwbn (5fd054a1-65a6-5c7a-b69d-789a918791b2)
ProductAvideo (9661ece6-3566-5d49-8e5d-0b77ccacf0fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wwbn/avideo purl2cpe 2026-06-01 10:18:10.324325

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-48728 vulnerable 2026-06-08 06:14:27.960659 Details available
CRITICAL (9.6)
A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
Published: 2024-01-10T15:48:10.985Z
Updated: 2025-11-04T18:19:18.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47861 vulnerable 2026-06-08 06:14:25.873206 Details available
CRITICAL (9)
A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
Published: 2024-01-10T15:48:10.489Z
Updated: 2025-11-04T18:19:07.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47171 vulnerable 2026-06-08 06:14:24.160390 Details available
MEDIUM (6.5)
An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.
Published: 2024-01-10T15:48:13.019Z
Updated: 2025-11-04T18:19:01.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34652 vulnerable 2026-06-08 05:46:02.507399 Details available
HIGH (8.3)
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules plugin, allowing an attacker to inject SQL by manipulating the description parameter.
Published: 2022-08-22T18:30:26.991Z
Updated: 2025-04-15T18:49:30.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33149 vulnerable 2026-06-08 05:44:46.295866 Details available
HIGH (8.3)
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the CloneSite plugin, allowing an attacker to inject SQL by manipulating the url parameter.
Published: 2022-08-22T18:29:57.518Z
Updated: 2025-04-15T18:49:38.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33148 vulnerable 2026-06-08 05:44:46.295529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33147 vulnerable 2026-06-08 05:44:46.294960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32778 vulnerable 2026-06-08 05:44:45.782862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32777 vulnerable 2026-06-08 05:44:45.782311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32772 vulnerable 2026-06-08 05:44:45.773684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32771 vulnerable 2026-06-08 05:44:45.773136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32770 vulnerable 2026-06-08 05:44:45.772505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32769 vulnerable 2026-06-08 05:44:45.771987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32768 vulnerable 2026-06-08 05:44:45.771478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32761 vulnerable 2026-06-08 05:44:45.762660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32572 vulnerable 2026-06-08 05:44:45.150376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32282 vulnerable 2026-06-08 05:44:43.134442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30690 vulnerable 2026-06-08 05:43:38.777551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30605 vulnerable 2026-06-08 05:43:38.643012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30547 vulnerable 2026-06-08 05:43:38.295745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30534 vulnerable 2026-06-08 05:43:38.193556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29468 vulnerable 2026-06-08 05:42:47.821847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28712 vulnerable 2026-06-08 05:42:45.192319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28710 vulnerable 2026-06-08 05:42:45.189241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26842 vulnerable 2026-06-08 05:41:53.459686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.