CVE-2020-37173 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endp…
High CVSS: 8.7

CVE-2020-37173

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the users_id parameter.
Vendor
Wwbn
Product
Avideo
CWE
CWE-359
Yayın Tarihi
2026-02-11 21:16:10
Güncelleme
2026-02-18 19:36:51
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-359 Avideo HIGH Wwbn 2026

Referanslar

https://avideo.com https://github.com/WWBN/AVideo https://www.exploit-db.com/exploits/47997 https://www.vulncheck.com/advisories/avideo-platform-information-disclosure-user-enumeration