CVE-2019-25255

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

Score

CVSS 4.0 8.7 High

Status

Deferred - disclosure@vulncheck.com

Published

2025-12-24

Last modified

2026-07-28

Weaknesses

CWE-78

Affected products

• Protection (Avg)

References

• http://www.video-flow.com
• https://www.exploit-db.com/exploits/44387
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php