Skip to content
Threat Feed

Product

Avideo (<= 29.0)

2 briefs RSS
high advisory

AVideo CloneSite Unauthenticated Information Disclosure Leading to Remote Database Dump

AVideo is vulnerable to unauthenticated information disclosure via the `plugin/CloneSite/cloneClient.json.php` endpoint, which echoes the local CloneSite shared secret (`$objClone->myKey`) in HTTP responses without authentication, enabling cross-site database dumps of the configured clone server.

avideo information_disclosure database_dump
2r 2t
high advisory

AVideo Unauthenticated Cross-User JavaScript Execution via YPTSocket Vulnerability

AVideo is vulnerable to unauthenticated cross-site scripting (XSS) due to an incomplete server-side fix for a YPTSocket `autoEvalCodeOnHTML` eval sink, allowing an attacker to bypass the fix by nesting the payload under a top-level `json` field, leading to arbitrary JavaScript execution in any logged-in user's browser session.

AVideo xss websocket vulnerability
2r 2t