RSS   Vulnerabilities for 'Videowhisper'   RSS

2014-04-28
 
CVE-2014-2715

CWE-79
 

 
Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the (1) module or (2) message parameter to index.php.

 

 >>> Vendor: Videowhisper 10 Products
Php 2 way video chat
Live streaming integration plugin
Videowhisper
Videowhisper live streaming integration
Video posts webcam recorder
Video presentation
Video conference
Video comments webcam recorder
Webcam
2way videocalls and random chat


Copyright 2024, cxsecurity.com

 

Back to Top