VideoWhisper Video Conference Cross Site Scripting

============================================================== Title ...| VideoWhisper Video Conference XSS Version .| Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| ==============================================================...

WordPress VideoWhisper Live Streaming 4.29.6 Cross Site Scripting

============================================================== Title ...| XSS in VideoWhisper Live Streaming Version .| 4.29.6 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://wordpress.org/plugins/ ==============================================================...

WordPress VideoWhisper Live Streaming Integration Plugin <= 4.29.4 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress VideoWhisper Live Streaming Integration Plugin <= 4.29.4 - Multiple Directory Traversal

Because of these vulnerabilities, the attackers can delete arbitrary files in the "s" parameter to ls/rtmplogout.php or read arbitrary files in the "s" parameter to ls/rtmplogin.php. Solution Update the plugin...

WordPress VideoWhisper Live Streaming Integration Plugin <= 4.29.4 - Multiple Vulnerabilities

The error-handling feature in ls/rtmp.inc.php, videowhisperstreaming.php or bp.php allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Solution Update the plugin...

PHP Webcam Video Conference - Multiple Vulnerabilities

Exploit: PHP Webcam Video Conference - LFI/XSS Date: 06/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.videowhisper.com/ Software Link: http://sourceforge.net/projects/phpwebcamvideoconference Solution: Upgrade from to the new version ...

CVE-2013-5714

Multiple cross-site scripting XSS vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 message parameter. NOTE: some of these details are...

CVE-2013-5714

Multiple cross-site scripting XSS vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 message parameter. NOTE: some of these details are...

CVE-2013-5714

The CVE-2013-5714 entry concerns the VideoWhisper Live Streaming Integration WordPress plugin (versions 4.25.3 and earlier) with XSS in ls/htmlchat.php. An attacker can inject arbitrary script via the name or message parameter, enabling remote XSS. Documented impact is client-side script executio...

PT-2013-5746 · Videowhisper · Videowhisper Live Streaming Integration

Name of the Vulnerable Software and Affected Versions: VideoWhisper Live Streaming Integration plugin versions 4.25.3 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name or message parameter in the ls/htmlchat.php file. This can lead to...

WordPress VideoWhisper Live Streaming Integration Plugin <= 4.25.3 - Multiple XSS

Because of these multiple vulnerabilities in ls/htmlchat.php, the attackers can inject arbitrary web script or HTML via the "name" or "message" parameter. Solution Update the plugin...

Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities

The Wordpress videowhisper-live-streaming-integration Plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities Author : Iranian Exploit...

WordPress VideoWhisper Video Conference 4.51 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Plugins - VideoWhisper Video Conference Arbitrary File Upload

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress VideoWhisper Video Presentation Plugin 3.17 - Arbitrary File Upload

VideoWhisper Video Presentation plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are al...

WordPress VideoWhisper Video Presentation 3.17 Shell Upload

Description : Wordpress Plugins - VideoWhisper Video Presentation Arbitrary File Upload Vulnerability Version : 3.17 Link : http://wordpress.org/extend/plugins/videowhisper-video-presentation/ Plugins : http://downloads.wordpress.org/plugin/videowhisper-video-presentation.zip Date : 31-05-2012...

WordPress Plugin VideoWhisper Video Presentation 3.17 - 'vw_upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53851/info The VideoWhisper Video Presentation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit...

WordPress Plugin VideoWhisper Video Presentation 3.17 - vw_upload.php Arbitrary File Upload

WordPress Plugin VideoWhisper Video Presentation 3.17 - vwupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53851/info The VideoWhisper Video Presentation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs becaus...

Wordpress VideoWhisper Video Presentation Plugin 3.17 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - VideoWhisper Video Presentation Arbitrary File Upload Vulnerability Version : 3.17 Link : http://wordpress.org/extend/plugins/videowhisper-video-presentation/ Plugins :...

CVE-2010-4971

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...