Vulnerabilities
Report: CVE-2026-33352 - AVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backs
CVE ID :CVE-2026-33352 Published : March 23, 2026, 2:16 p.m. | 1 hour, 25 minutes ago Description :WWBN AVideo is an open source video platform. Prior to version 26.0, an unauthenticated SQL injection vulnerability exists in `objects/category.php` in the `getAllCategories()` method. The `doNotShowCats` request parameter is sanitized only by stripping single-quote characters (`str_replace(
CVE Details
CVE ID
Published
March 23, 2026
Affected Product:
php
Impact:
SQL injection