CVE-2022-30547

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-22

• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1547Exploit, Technical Description, Third Party Advisory
• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1547Exploit, Technical Description, Third Party Advisory

Published

Aug 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30541An OS command injection vulnerability exists in the XCMD set…9.8
• CVE-2022-30542Improper input validation in the firmware for some Intel(R) …6.7
• CVE-2022-30543A leftover debug code vulnerability exists in the console in…8.8
• CVE-2022-30544Cross-Site Request Forgery (CSRF) in MiKa's OSM – OpenStreet…8.8
• CVE-2022-30545Auth. Reflected Cross-Site Scripting (XSS) vulnerability in …4.8
• CVE-2022-30546Out-of-bounds read vulnerability exists in the simulator mod…7.8
• CVE-2022-30548Uncontrolled search path element in the Intel(R) Glorp softw…7.8
• CVE-2022-30549Out-of-bounds read vulnerability exists in V-Server v4.0.11.…7.8
• CVE-2022-3055Use after free in Passwords in Google Chrome prior to 105.0.…8.8
• CVE-2022-30550An issue was discovered in the auth component in Dovecot 2.2…8.8
• CVE-2022-30551OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker…7.5
• CVE-2022-30552Das U-Boot 2022.01 has a Buffer Overflow.5.5