Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

videowhisper videowhisper live streaming integration vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2014-4569
Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and previous versions for WordPress allows remote malicious users to inject arbitrary web script or HTML via the room_name parameter.
Videowhisper Videowhisper Live Streaming Integration 4.27.2Videowhisper Videowhisper Live Streaming Integration 4.25Videowhisper Videowhisper Live Streaming Integration 4.05Videowhisper Videowhisper Live Streaming Integration 2.2Videowhisper Videowhisper Live Streaming Integration 2.1Videowhisper Videowhisper Live Streaming Integration 2.0Videowhisper Videowhisper Live Streaming IntegrationVideowhisper Videowhisper Live Streaming Integration 4.07Videowhisper Videowhisper Live Streaming Integration 1.0.2
4.3
CVSSv2
CVE-2014-1906
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin prior to 4.29.5 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) m parameter to lb_status.php; (2) msg parameter to vc_chatlog.ph...
Videowhisper Live Streaming Integration PluginVideowhisper Live Streaming Integration Plugin 4.25.3Videowhisper Live Streaming Integration Plugin 1.0.2Videowhisper Live Streaming Integration Plugin 4.25Videowhisper Live Streaming Integration Plugin 4.07Videowhisper Live Streaming Integration Plugin 4.27Videowhisper Live Streaming Integration Plugin 4.27.3Videowhisper Live Streaming Integration Plugin 2.1Videowhisper Live Streaming Integration Plugin 2.0Videowhisper Live Streaming Integration Plugin 4.05Videowhisper Live Streaming Integration Plugin 2.2
10
CVSSv2
CVE-2014-1905
Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin prior to 4.29.5 for WordPress allows remote malicious users to execute arbitrary PHP code by uploading a file with a double extension, and then accessing the file v...
Videowhisper Videowhisper Live Streaming Integration
5
CVSSv2
CVE-2014-1908
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin prior to 4.29.5 for WordPress allows remote malicious users to obtain sensitive information via a direct request, which reveals ...
Videowhisper Videowhisper Live Streaming Integration
4.3
CVSSv2
CVE-2014-2297
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) n parameter to ls/htmlchat.php or (2) bgcolor parameter to ls/index.php. ...
Videowhisper Videowhisper Live Streaming Integration 4.29.6
6.4
CVSSv2
CVE-2014-1907
Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin prior to 4.29.5 for WordPress allow remote malicious users to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a...
Videowhisper Live Streaming Integration Plugin 4.27Videowhisper Live Streaming Integration Plugin 4.27.3Videowhisper Live Streaming Integration Plugin 2.1Videowhisper Live Streaming Integration Plugin 2.0Videowhisper Live Streaming Integration PluginVideowhisper Live Streaming Integration Plugin 4.25.3Videowhisper Live Streaming Integration Plugin 1.0.2Videowhisper Live Streaming Integration Plugin 4.05Videowhisper Live Streaming Integration Plugin 2.2Videowhisper Live Streaming Integration Plugin 4.25Videowhisper Live Streaming Integration Plugin 4.07
4.3
CVSSv2
CVE-2013-5714
Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) name or (2) message parameter. NO...
Videowhisper Live Streaming Integration Plugin 4.07Videowhisper Live Streaming Integration Plugin 4.05Videowhisper Live Streaming Integration Plugin 2.2Videowhisper Live Streaming Integration Plugin 2.1Videowhisper Live Streaming Integration PluginVideowhisper Live Streaming Integration Plugin 1.0.2Videowhisper Live Streaming Integration Plugin 4.25Videowhisper Live Streaming Integration Plugin 2.0
NA
CVE-2014-19062
VideoWhisper Live Streaming Integration version 4.27.3 suffers from cross site scripting, remote shell upload, information exposure, and path traversal vulnerabilities.
NA
CVE-2014-19084
VideoWhisper Live Streaming Integration version 4.27.3 suffers from cross site scripting, remote shell upload, information exposure, and path traversal vulnerabilities.
NA
CVE-2023-25699
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integration allows OS Command Injection.This issue affects VideoWhisper Live Streaming Integration: from n/a up to an...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook