CVE-2015-9272

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code...

CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

Input validation

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

CVE-2015-9271

CVE-2015-9271 affects the VideoWhisper videowhisper-video-conference-integration plugin for WordPress, version 4.91.8. The root cause is in vc/vw_upload.php, which treats a file as safe if the last four characters are 'html', enabling remote code execution via uploaded files containing PHP in a ....

CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

WordPress VideoWhisper Live Streaming Integration Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.VideoWhisper Live Streaming Integration plugin is used in one of the video resources playback management plugin. ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

CVE-2014-2297

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

CVE-2014-2297

CVE-2014-2297 concerns multiple Cross-Site Scripting (XSS) vulnerabilities in the WordPress plugin VideoWhisper Live Streaming Integration (version 4.29.6 mentioned in the CVE description). Attackers can inject arbitrary script/HTML by manipulating the n parameter to ls/htmlchat.php or the bgcolo...

CVE-2014-2297

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

videowhisper.com XSS vulnerability

Open Bug Bounty ID: OBB-458146 Description| Value ---|--- Affected Website:| videowhisper.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Wordpress VideoWhisper Video Conference Remote Shell Upload Exploit

Exploit for php platform in category web applications Exploit Title: Wordpress VideoWhisper Video Conference Remote Shell Upload Exploit Software Link: http://www.videowhisper.com/ Version:all Version Google dork1: inurl:/wp-content/plugins/VideoWhisper Video Conference/ Google dork2:...

Wordpress VideoWhisper Video Presentation plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin videowhisper-video-presentation XSS Vulnerability Vendor or Software Link: https://wordpress.org/plugins/videowhisper-video-presentation/ Google dork: inurl:/wp-content/plugins/videowhisper-video-presentation Th...

WordPress VideoWhisper Video Conference Integration Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.VideoWhisper Video Conference Integration is a video conferencing plugin. A security vulnerability in the WordPress VideoWhisper Video Conference Integration plugin...

WordPress VideoWhisper Video Presentation Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.VideoWhisper Video Presentation is a video communication plugin. A security vulnerability in the WordPress VideoWhisper Video Presentation plugin allows remote...

WordPress Live Streaming Integration Plugin <= 4.29.6 - XSS

This plugin is prone to videowhisperstreaming.php multiple parameter cross site scripting vulnerability. Solution Update plugin...

WordPress Plugin VideoWhisper Video Presentation 3.31.17 - Arbitrary File Upload

WordPress Plugin VideoWhisper Video Presentation 3.31.17 - Arbitrary File Upload Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site:...

VideoWhisper Video Conference Integration 4.91.8 - Remote File Upload Vulnerability

WordPress VideoWhisper Video Conference Integration plugin version 4.91.8 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download...

WordPress Plugin VideoWhisper Video Conference Integration 4.91.8 - Arbitrary File Upload

Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site: https://wordpress.org/support/plugin/videowhisper-video-conference-integration Vendor: http://www.videowhisper.com/...

WordPress VideoWhisper Video Presentation 3.31.17 - Remote File Upload

WordPress Kernel theme is prone to a remote file upload vulnerability. Because of this vulnerability, anyone can upload the files for the example, .zip, .rar, .mp3, .jpeg, .txt, .html, etc. to an wordpress site. Solution Upgrade the plugin...