212 matches found
VideoWhisper Video Presentation <= 1.1 - SQL Injection
The VideoWhisper Video Presentation WordPress plugin was affected by a SQL Injection security vulnerability...
VideoWhisper Live Streaming Integration < 4.27.2 - Cross-Site Scripting (XSS)
The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
VideoWhisper Video Conference Integration 4.51 - Arbitrary File Upload
The Webcam Video Conference WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
VideoWhisper Live Streaming Integration 4.29.6 - videowhisper_streaming.php Multiple Parameter XSS
The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a videowhisperstreaming.php Multiple Parameter XSS security vulnerability...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 roomname parameter to clogin.php or 2 room parameter to index.php in vp/...
CVE-2014-4568
The CVE-2014-4568 entry refers to a Cross-Site Scripting (XSS) vulnerability in the Video Posts Webcam Recorder WordPress plugin. Affected is version 1.55.4 and earlier, with the issue located in posts/videowhisper/r_logout.php where the message parameter can be exploited to inject arbitrary web ...
CVE-2014-4570
CVE-2014-4570 affects the VideoWhisper Video Presentation WordPress plugin (pre-3.31). Vulnerability: cross-site scripting (XSS) allowing remote attackers to inject arbitrary script/HTML via the room_name parameter to c_login.php or the room parameter to index.php in vp/. Impact: XSS with network...
CVE-2014-4570
Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 roomname parameter to clogin.php or 2 room parameter to index.php in vp/...
CVE-2014-4569
Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...
CVE-2014-4569
CVE-2014-4569 affects WordPress via the VideoWhisper Live Streaming Integration Plugin (versions 4.27.2 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in ls/vv_login.php that allows remote attackers to inject arbitrary script or HTML through the room_name parameter. The issu...
CVE-2014-4569
Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...
WordPress VideoWhisper Video Presentation plugin <= 1.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress VideoWhisper Video Presentation plugin = 1.1 SQL Injection Vulnerability Date: 2011-09-02 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...
Wordpress VideoWhisper 4.27.3 - Multiple Vulnerabilities
No description provided by source...
WordPress VideoWhisper Video Presentation Plugin <= 3.30 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress VideoWhisper Live Streaming Integration Plugin <= 4.27.2 - XSS
Because of this vulnerability in ls/vvlogin.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
SA-CONTRIB-2014-061 - VideoWhisper Webcam Plugins - Cross Site Scripting (XSS) - Unsupported
Includes multiple modules for video communications including room listing, pay per view access control. The module doesn't sufficiently filter user supplied text from the url reflected cross site scripting. No special permissions are required to exploit this issue. There are no mitigating factors...
[CVE-2014-2715] Cross-site scripting (XSS) vulnerability in Videowhisper
Vulnerability title: Cross-site scripting XSS vulnerability in Videowhisper CVE: CVE-2014-2715 Vendor: VideoWhisper Product: Videowhisper module for Drupal 7 Affected version: 7 Fixed version: Reported by: Mahmoud Ghorbanzadeh Details: Hello, I found Cross-site scripting XSS vulnerability in the...
CVE-2014-2715
Multiple cross-site scripting XSS vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the 1 module or 2 message parameter to index.php...
CVE-2014-2715
VideoWhisper Webcam Plugins (Drupal 7.x) are affected by CVE-2014-2715 due to cross-site scripting in vwrooms/templates/logout.tpl.php. The vulnerability allows injecting arbitrary script via the module or message parameters in index.php, caused by reflected user input. Impact is XSS; exploit det...