High severity7.5NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026
CVE-2020-37173
CVE-2020-37173
Description
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the users_id parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: = 8.1
- AVideo/AVideo Platformv5Range: 8.1
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/47997nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/avideo-platform-information-disclosure-user-enumerationnvdThird Party Advisory
- avideo.comnvdProduct
News mentions
0No linked articles in our index yet.