CVE-2026-85155

Name of the Vulnerable Software and Affected Versions WWBN AVideo (affected versions not specified)

Description An issue exists in the 'get.json.php' endpoint when the APIName is set to 'channels'. Unauthenticated attackers can manipulate the sort column parameter to perform a SQL injection. This allows the ordering of results by arbitrary database columns, such as users.password and users.recoverPass. By using this ordering oracle, attackers can infer password hash values and recovery tokens. Additionally, this can trigger SQL errors that reveal the full query statement and the database schema.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.