Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2023-49864

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerability is triggered by the downloadURL_image parameter.

  • Published: Jan 10, 2024
  • Updated: Nov 5, 2025
  • CVE: CVE-2023-49864
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
wwbn / avideo dev_master_commit_15fed957fb dev_master_commit_15fed957fb.x