This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2019-25255 | BDVDB-2026-307513 Detail

VideoFlowVideoFlow Digital Video Protection DVP

Description#

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.