Drupal 7 Videowhisper Cross Site Scripting

Hello, Cross Site Scripting XSS vulnerability exists in videowhisper module for Drupal 7. Vendor Notification: 22, Oct 2014 Vulnerable file: drupal/modules/videowhisper/vwrooms/js/jsor-jcarousel/examples/specialtextscroller.php POC:...

VideoWhisper Video Presentation 3.25 - vp/c_login.php room_name Parameter Reflected XSS

The VideoWhisper Video Presentation WordPress plugin was affected by a vp/clogin.php roomname Parameter Reflected XSS security vulnerability...

WordPress VideoWhisper Video Presentation Cross Site Scripting Vulnerability

WordPress VideoWhisper Video Presentation Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

VideoWhisper Video Presentation <= 1.1 - SQL Injection

The VideoWhisper Video Presentation WordPress plugin was affected by a SQL Injection security vulnerability...

VideoWhisper Video Presentation 3.17 - 'vw_upload.php' Arbitrary File Upload

The VideoWhisper Video Presentation WordPress plugin was affected by a 'vwupload.php' Arbitrary File Upload security vulnerability...

VideoWhisper Live Streaming Integration < 4.27.2 - Cross-Site Scripting (XSS)

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

VideoWhisper Video Conference Integration 4.51 - Arbitrary File Upload

The Webcam Video Conference WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

VideoWhisper Live Streaming Integration 4.29.6 - videowhisper_streaming.php Multiple Parameter XSS

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a videowhisperstreaming.php Multiple Parameter XSS security vulnerability...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 roomname parameter to clogin.php or 2 room parameter to index.php in vp/...

CVE-2014-4568

The CVE-2014-4568 entry refers to a Cross-Site Scripting (XSS) vulnerability in the Video Posts Webcam Recorder WordPress plugin. Affected is version 1.55.4 and earlier, with the issue located in posts/videowhisper/r_logout.php where the message parameter can be exploited to inject arbitrary web ...

CVE-2014-4570

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 roomname parameter to clogin.php or 2 room parameter to index.php in vp/...

CVE-2014-4570

CVE-2014-4570 affects the VideoWhisper Video Presentation WordPress plugin (pre-3.31). Vulnerability: cross-site scripting (XSS) allowing remote attackers to inject arbitrary script/HTML via the room_name parameter to c_login.php or the room parameter to index.php in vp/. Impact: XSS with network...

PT-2014-5982

Name of the Vulnerable Software and Affected Versions Video Posts Webcam Recorder plugin versions 1.55.4 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the message parameter in the r logout.php file. Recommendations For Vide...

CVE-2014-4570: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 roomname parameter to clogin.php or 2 room parameter to index.php in vp/...

PT-2014-5984

Name of the Vulnerable Software and Affected Versions VideoWhisper Video Presentation plugin versions prior to 3.31 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically,...

CVE-2014-4569

Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...

CVE-2014-4569

Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...

CVE-2014-4569

CVE-2014-4569 affects WordPress via the VideoWhisper Live Streaming Integration Plugin (versions 4.27.2 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in ls/vv_login.php that allows remote attackers to inject arbitrary script or HTML through the room_name parameter. The issu...

WordPress VideoWhisper Video Presentation plugin <= 1.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress VideoWhisper Video Presentation plugin = 1.1 SQL Injection Vulnerability Date: 2011-09-02 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...