Wwbn Avideo权限绕过漏洞(CVE-2025-34437)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-34437
• https://cve.imfht.com/detail/CVE-2025-34437
• https://github.com/advisories/GHSA-x77x-f67v-g9v4
• https://access.redhat.com/security/cve/cve-2025-34437
• https://radar.offseq.com/threat/cve-2025-34437-cwe-639-authorization-bypass-throug-9c60e9ac
• https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-34437
• https://chocapikk.com/posts/2025/avideo-security-vulnerabilities/
• https://cve.imfht.com/detail/CVE-2025-34437?lang=en
• https://devhub.checkmarx.com/cve-details/cve-2025-34437/

Related Vulnerabilities

• AVideo /plugin/API/get.json.php 文件包含漏洞（CVE-2026-33513）
• WWBN AVideo /objects/plugins.json.php 信息泄露漏洞 （CVE-2026-43885）
• PoCCVE-2026-33478: AVideo <= 26.0 - WWBN AVideo - Remote Code Execution
• AVideo /plugin/Live/test.php 服务器端请求伪造漏洞（CVE-2026-33502）
• (CVE-2025-34433) AVideo 安装盐预测远程代码执行漏洞
• Wwbn Avideo任意重定向漏洞(CVE-2025-34440)
• Wwbn Avideo敏感系统信息暴露给未经授权的控制领域漏洞(CVE-2025-34442)
• Wwbn Avideo权限绕过漏洞(CVE-2025-34438)
• Wwbn Avideo任意重定向漏洞(CVE-2025-34439)
• Wwbn Avideo向未经授权的行为者暴露私人个人信息漏洞(CVE-2025-34441)
• Wwbn Avideo权限绕过漏洞(CVE-2025-34436)
• Wwbn Avideo权限绕过漏洞(CVE-2025-34435)
• Wwbn Avideo缺少关键功能的身份验证漏洞(CVE-2025-34434)