← CVE Intelligence

CVE-2025-48732

WWBN / AVideo PUBLISHED

Description (CNA)

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can request a .phar file to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
WWBN / AVideoaffected 14.4; affected dev master commit 8a8954ff

CWE

CWE-184

References

ADP enrichment

CISA-ADP

No English description supplied.

CVE

No English description supplied.