Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 12, 2026
AVideo Platform 8.1 - Information Disclosure (User Enumeration)
CVE-2020-37173
Description
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the users_id parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: =8.1
- AVideo/AVideo Platformv5Range: 8.1
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/47997mitreexploit
- www.vulncheck.com/advisories/avideo-platform-information-disclosure-user-enumerationmitrethird-party-advisory
- avideo.commitreproduct
News mentions
0No linked articles in our index yet.