Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 12, 2026
AVideo Platform 8.1 - Information Disclosure (User Enumeration)
CVE-2020-37173
Description
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the users_id parameter.
Affected products
2- Range: =8.1
- AVideo/AVideo Platformv5Range: 8.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/47997mitreexploit
- www.vulncheck.com/advisories/avideo-platform-information-disclosure-user-enumerationmitrethird-party-advisory
- avideo.commitreproduct
News mentions
0No linked articles in our index yet.