GHSA-mv5w-wr5c-575p
WWBN AVideo Remote Code Execution
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | wwbn/avideo | >= 12.4, < 14.3 | 14.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.
References
External links from the advisory. They lead to third-party sites.