Approved changes feed: RSS · Atom
cpe:2.3:a:wwbn:avideo:15fed957fb:*:*:*:*:*:*:*part: a version: 15fed957fb update: *
| Vendor | Wwbn (5fd054a1-65a6-5c7a-b69d-789a918791b2) |
|---|---|
| Product | Avideo (9661ece6-3566-5d49-8e5d-0b77ccacf0fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wwbn/avideo |
purl2cpe | 2026-06-01 10:18:10.327787 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50172 |
vulnerable | 2026-06-08 06:16:15.605776 |
Details available
MEDIUM (5.3)
A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to the silent creation of a recovery pass code for any user.
Published: 2024-01-10T15:48:08.638Z
Updated: 2025-11-04T18:20:29.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49810 |
vulnerable | 2026-06-08 06:16:10.521635 |
Details available
HIGH (7.3)
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to brute force user credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.
Published: 2024-01-10T15:48:08.090Z
Updated: 2025-11-04T18:19:47.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49738 |
vulnerable | 2026-06-08 06:16:10.336622 |
Details available
HIGH (7.5)
An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.
Published: 2024-01-10T15:48:11.922Z
Updated: 2025-11-04T18:19:46.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49715 |
vulnerable | 2026-06-08 06:16:10.303705 |
Details available
MEDIUM (4.3)
A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP requests to trigger this vulnerability.
Published: 2024-01-10T15:48:10.029Z
Updated: 2025-11-04T18:19:45.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49599 |
vulnerable | 2026-06-08 06:14:29.231951 |
Details available
CRITICAL (9.8)
An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead to privilege escalation. An attacker can gather system information via HTTP requests and brute force the salt offline, leading to forging a legitimate password recovery code for the admin user.
Published: 2024-01-10T15:48:07.636Z
Updated: 2025-11-04T18:19:44.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49589 |
vulnerable | 2026-06-08 06:14:29.226718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48730 |
vulnerable | 2026-06-08 06:14:27.961419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47862 |
vulnerable | 2026-06-08 06:14:25.873706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47861 |
vulnerable | 2026-06-08 06:14:25.873235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47171 |
vulnerable | 2026-06-08 06:14:24.161685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.