← Database

CVE-2026-45620

MEDIUM CVSS: 5.3 Published: 2026-05-29 Modified: 2026-07-21

Description

WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admin gate. It only has an entry guard: preg_match('/^@/', $_REQUEST['term']) and hard-coded rowCount=10. This enables unauthenticated user enumeration.

Affected Platforms

Wwbn Avideo

Weakness Type

CWE-204, CWE-285

References