Lucene search

K
patchstackHigh-Tech Bridge SAPATCHSTACK:2EEFF5501B7B7627B5EFB695AF6A9739
HistoryFeb 28, 2014 - 12:00 a.m.

WordPress VideoWhisper Plugin 4.27.3 - Multiple Vulnerabilities

2014-02-2800:00:00
High-Tech Bridge SA
patchstack.com
8

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

VideoWhisper plugin is prone to multiple vulnerabilities, such as arbitrary file upload and cross-site scripting (XSS) and information exposure through externally-generated error message in VideoWhisper Live Streaming Integration: CVE-2014-1908.

Solution

           Upgrade to VideoWhisper Live Streaming Integration version 4.29.5.
CPENameOperatorVersion
videowhisperle4.27.3

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C