CVE-2015-9271

creationtimestamp| type| source ---|---|--- 2018-10-05 02:25:12+00:00| seen| https://t.me/cibsecurity/536...

CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

CVE-2015-9271

CVE-2015-9271 affects the VideoWhisper videowhisper-video-conference-integration plugin for WordPress, version 4.91.8. The root cause is in vc/vw_upload.php, which treats a file as safe if the last four characters are 'html', enabling remote code execution via uploaded files containing PHP in a ....