CVE-2015-9272

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code...

CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

Input validation

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

CVE-2015-9271

CVE-2015-9271 affects the VideoWhisper videowhisper-video-conference-integration plugin for WordPress, version 4.91.8. The root cause is in vc/vw_upload.php, which treats a file as safe if the last four characters are 'html', enabling remote code execution via uploaded files containing PHP in a ....

CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

WordPress VideoWhisper Live Streaming Integration Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.VideoWhisper Live Streaming Integration plugin is used in one of the video resources playback management plugin. ...

CVE-2014-2297

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

CVE-2014-2297

CVE-2014-2297 concerns multiple Cross-Site Scripting (XSS) vulnerabilities in the WordPress plugin VideoWhisper Live Streaming Integration (version 4.29.6 mentioned in the CVE description). Attackers can inject arbitrary script/HTML by manipulating the n parameter to ls/htmlchat.php or the bgcolo...

CVE-2014-2297

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

videowhisper.com XSS vulnerability

Open Bug Bounty ID: OBB-458146 Description| Value ---|--- Affected Website:| videowhisper.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Wordpress VideoWhisper Video Conference Remote Shell Upload Exploit

Exploit for php platform in category web applications Exploit Title: Wordpress VideoWhisper Video Conference Remote Shell Upload Exploit Software Link: http://www.videowhisper.com/ Version:all Version Google dork1: inurl:/wp-content/plugins/VideoWhisper Video Conference/ Google dork2:...

Wordpress VideoWhisper Video Presentation plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin videowhisper-video-presentation XSS Vulnerability Vendor or Software Link: https://wordpress.org/plugins/videowhisper-video-presentation/ Google dork: inurl:/wp-content/plugins/videowhisper-video-presentation Th...

WordPress VideoWhisper Video Conference Integration Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.VideoWhisper Video Conference Integration is a video conferencing plugin. A security vulnerability in the WordPress VideoWhisper Video Conference Integration plugin...

WordPress VideoWhisper Video Presentation Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.VideoWhisper Video Presentation is a video communication plugin. A security vulnerability in the WordPress VideoWhisper Video Presentation plugin allows remote...

WordPress Live Streaming Integration Plugin <= 4.29.6 - XSS

This plugin is prone to videowhisperstreaming.php multiple parameter cross site scripting vulnerability. Solution Update plugin...

WordPress Plugin VideoWhisper Video Presentation 3.31.17 - Arbitrary File Upload

WordPress Plugin VideoWhisper Video Presentation 3.31.17 - Arbitrary File Upload Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site:...

VideoWhisper Video Conference Integration 4.91.8 - Remote File Upload Vulnerability

WordPress VideoWhisper Video Conference Integration plugin version 4.91.8 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download...

WordPress Plugin VideoWhisper Video Conference Integration 4.91.8 - Arbitrary File Upload

Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site: https://wordpress.org/support/plugin/videowhisper-video-conference-integration Vendor: http://www.videowhisper.com/...

WordPress VideoWhisper Video Presentation 3.31.17 - Remote File Upload Vulnerability

WordPress VideoWhisper Video Presentation plugin version 3.31.17 suffers from a remote shell upload vulnerability Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site:...