wwbn/avideo vulnerabilities (Packagist)
144 vulnerabilities.
wwbn/avideoPackagistAVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() Bug6.5 Mediumwwbn/avideoPackagistAVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI Guard6.5 Mediumwwbn/avideoPackagistAVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints5.3 Mediumwwbn/avideoPackagistAVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.php7.5 Highwwbn/avideoPackagistAVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification6.4 Mediumwwbn/avideoPackagistAVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security Plugins6.5 Mediumwwbn/avideoPackagistAVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All Users6.5 Mediumwwbn/avideoPackagistAVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin Panel6.1 Mediumwwbn/avideoPackagistAVideo: CSRF on Admin Plugin Configuration Enables Payment Credential Hijacking8.1 Highwwbn/avideoPackagistAVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.php6.5 Mediumwwbn/avideoPackagistAVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php8.7 Highwwbn/avideoPackagistAVideo Vulnerable to Reflected XSS via Unsanitized plugin Parameter in YPTWallet Stripe Payment Page8.2 Highwwbn/avideoPackagistAVIdeo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification5.3 Mediumwwbn/avideoPackagistAVideo Vulnerable to Wallet Balance Double-Spend via TOCTOU Race Condition in transferBalance5.3 Mediumwwbn/avideoPackagistAVideo has User Group-Based Category Access Control Bypass via Missing and Broken Group Filtering in categories.json.php5.3 Mediumwwbn/avideoPackagistAVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()5.4 Mediumwwbn/avideoPackagistAVideo's IDOR in uploadPoster.php Allows Any Authenticated User to Overwrite Scheduled Live Stream Posters and Trigger False Socket Notifications5.4 Mediumwwbn/avideoPackagistAVideo's Missing Authorization in Playlist Schedule Creation Allows Cross-User Broadcast Hijacking6.3 Mediumwwbn/avideoPackagistAVideo has Plaintext Video Password Storage9.1 Criticalwwbn/avideoPackagistAVideo has SQL Injection in category.php fixCleanTitle() via Unparameterized clean_title and id Variables7.1 Highwwbn/avideoPackagistAVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into Query7.1 Highwwbn/avideoPackagistAVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints5.3 Mediumwwbn/avideoPackagistAVideo: IDOR in AI Plugin Allows Stealing Other Users' AI-Generated Metadata and Transcriptions4.3 Mediumwwbn/avideoPackagistAVideo has an Unauthenticated Video Password Brute-Force Vulnerability via Unrate-Limited Boolean Oracle5.3 Mediumwwbn/avideoPackagistAVideo: Unauthenticated Access to Scheduler Plugin Endpoints Leaks Scheduled Tasks, Email Content, and User Mappings5.3 Mediumwwbn/avideoPackagistAVideo: Unauthenticated IDOR in playlistsVideos.json.php Exposes Private Playlist Contents5.3 Mediumwwbn/avideoPackagistAVideo: Full-Read SSRF Through Unvalidated statsURL Parameter in plugin/Live/test.php4.9 Mediumwwbn/avideoPackagistAVideo Vulnerable to SQL Injection in Subscribe Endpoint via Unsanitized user_id Parameter in subscribe.php7.1 Highwwbn/avideoPackagistAVideo Vulnerable to Unauthenticated CDN Configuration Takeover via Empty Default Key Bypass and Mass-Assignment in status.json.php8.6 Highwwbn/avideoPackagistAVideo Vulnerable to Remote Code Execution via Persistent PHP Temp File in Encoder downloadURL with Resolution Validation Abort8.8 Highwwbn/avideoPackagistAVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php9.4 Criticalwwbn/avideoPackagistAVideo vulnerable to IP Address Spoofing via Untrusted HTTP Headers in getRealIpAddr()5.3 Mediumwwbn/avideoPackagistAVideo has Pre-Captcha User Enumeration and Account Status Disclosure in Password Recovery Endpoint5.3 Mediumwwbn/avideoPackagistAVideo Allows Unauthenticated Access to AD_Server reports.json.php that Exposes Ad Campaign Analytics and User Data5.3 Mediumwwbn/avideoPackagistAVideo vulnerable to Stored XSS via html_entity_decode() Reversing xss_esc() Sanitization in Channel About Field5.4 Mediumwwbn/avideoPackagistAVideo has Path Traversal in pluginRunDatabaseScript.json.php Enables Arbitrary SQL File Execution via Unsanitized Plugin Name7.2 Highwwbn/avideoPackagistAVideo has a Blind SQL Injection in Live Schedule Reminder via Unsanitized live_schedule_id in Scheduler_commands::getAllActiveOrToRepeat()8.1 Highwwbn/avideoPackagistAVideo's Video Moderator Privilege Escalation via Ownership Transfer Enables Arbitrary Video Deletion7.6 Highwwbn/avideoPackagistAVideo's GET-Based CSRF in setPermission.json.php Enables Privilege Escalation via Arbitrary Permission Modification8.1 Highwwbn/avideoPackagistAVideo Vulnerable to OS Command Injection via Unsanitized `users_id` and `liveTransmitionHistory_id` in Restreamer Log File Path8.8 Highwwbn/avideoPackagistAVideo Vulnerable to Remote Code Execution via MIME/Extension Mismatch in ImageGallery File Upload8.8 Highwwbn/avideoPackagistAVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)8.6 Highwwbn/avideoPackagistAVideo has an unauthenticated decrypt oracle leaking any ciphertext7.5 Highwwbn/avideoPackagistAVideo Affected by CSRF on Plugin Import Endpoint Enables Unauthenticated Remote Code Execution via Malicious Plugin Upload8.8 Highwwbn/avideoPackagistAVideo has Unauthenticated SSRF via plugin/Live/test.php9.3 Criticalwwbn/avideoPackagistAVideo has Unauthenticated Information Disclosure of User Group Permission Mappings via Permissions Plugin5.3 Mediumwwbn/avideoPackagistAVideo Vulnerable to Stored XSS via Markdown `javascript:` URI Bypasses ParsedownSafeWithLinks Sanitization5.4 Mediumwwbn/avideoPackagistAVideo has Reflected XSS via unlockPassword Parameter in forbiddenPage.php and warningPage.php6.1 Mediumwwbn/avideoPackagistAVideo has a Path Traversal in import.json.php that Allows Private Video Theft and Arbitrary File Read/Deletion via fileURI Parameter7.1 Highwwbn/avideoPackagistAVideo has Session Fixation via GET PHPSESSID Parameter With Disabled Login Session Regeneration7.3 High- Show moreLoading…