Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.4
CVSSv2

CVE-2014-1907

Published: 06/03/2014 Updated: 29/08/2017
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 645
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Subscribe to Videowhisper

Vulnerability Summary

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin prior to 4.29.5 for WordPress allow remote malicious users to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_logout.php.

Vulnerable Product Search on Vulmon Subscribe to Product

videowhisper live_streaming_integration_plugin 4.27

videowhisper live_streaming_integration_plugin 4.27.3

videowhisper live_streaming_integration_plugin 2.1

videowhisper live_streaming_integration_plugin 2.0

videowhisper live_streaming_integration_plugin

videowhisper live_streaming_integration_plugin 4.25.3

videowhisper live_streaming_integration_plugin 1.0.2

videowhisper live_streaming_integration_plugin 4.05

videowhisper live_streaming_integration_plugin 2.2

videowhisper live_streaming_integration_plugin 4.25

videowhisper live_streaming_integration_plugin 4.07

Exploits

Exploit DB: WordPress Plugin VideoWhisper 4.27.3 - Multiple Vulnerabilities
Advisory ID: HTB23199 Product: VideoWhisper Live Streaming Integration Vendor: VideoWhisper Vulnerable Version(s): 4273 and probably prior Tested Version: 4273 Advisory Publication: February 6, 2014 [without technical details] Vendor Notification: February 6, 2014 Vendor Patch: February 7, 2014 Public Disclosure: February 27, 2014 Vulnerability ...
Exploit DB: VideoWhisper Live Streaming Integration 4.27.3 XSS / Shell Upload / Traversal
VideoWhisper Live Streaming Integration version 4273 suffers from cross site scripting, remote shell upload, information exposure, and path traversal vulnerabilities ...

References

CWE-22https://www.htbridge.com/advisory/HTB23199http://packetstormsecurity.com/files/125454https://exchange.xforce.ibmcloud.com/vulnerabilities/91478https://nvd.nist.govhttps://www.exploit-db.com/exploits/31986/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook