AVideo version 12.4 suffers from a PHP code injection vulnerability.